Privacy — the work portal
Plain version: you send us your clients' records so we can do the work you've asked for. We keep them only for that, in the UK/EU, and we delete them when you tell us to.
Who's who
Your practice is the data controller for your clients' information. Muckin is your processor. We act on your instructions — the job you post is the instruction.
What we hold
Your firm's details, the names and emails of the people you add, the clients you file work against, the jobs, the files you upload, the messages and queries on each job, and the hours we log. We also keep a log of every email the portal sends so you can see what went where.
Where it lives
The database and file storage are hosted on Supabase in London (eu-west-2). The app runs on Netlify with its functions pinned to London. Email goes out through Brevo (EU). Our production team works from Pretoria, South Africa, and accesses the portal over encrypted connections under UK sign-off; the data itself stays in the London region.
Who can see what
Your firm's people see only your firm's jobs. Muckin staff see every firm's jobs because that's the work. Internal notes we write to each other are never shown to firms. Files are only ever reached through short-lived signed links issued after the same checks.
How long
Job files and messages stay until you close the job and ask us to delete them, or until your seat ends, whichever is first, plus 90 days in backups. Sign-in codes are deleted after use or ten minutes.
Email links that skip sign-in
Some emails carry a link that lets you upload documents or answer queries on one specific job without signing in. The link is a random 30-day token tied to you; it can't reach the rest of the portal or download anything, and everything done through it is logged against your name. Forward the email and you forward that access — treat it like a key.
Companies House
When you add a client by company number we pull their public Companies House record (dates, status, registered office) and refresh it nightly. That data is public; we store it against your client to drive deadlines.
Your rights, your clients' rights
Ask and we'll export or delete anything we hold for your firm. Email hello@muckin.co.uk.
Muckin is a trading name. This page describes the work portal at app.muckin.co.uk only.