Redwood River Enterprises, LLC ("we", "us", "our") runs the Mr. Ugly membership and the websites at umaycallme.com and join.umaycallme.com. We are based in the United States, at 4539 N 22nd St, Ste N, Phoenix, AZ 85016, United States.
We are the data controller for your personal information. That means we decide why and how it is used, and we are the ones accountable for it.
When we say "the Service" in this policy, we mean the Mr. Ugly membership, our websites, the letters you receive and the replies you send, and everything else that comes with your membership.
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it. It covers everything you do with us — signing up, paying, receiving letters, writing back, and contacting us for help.
Right now, we offer memberships to people in the United States. We do not currently offer memberships to residents of the United Kingdom or the European Union. This is a temporary position, and we will update this policy before that changes.
Where UK GDPR or EU GDPR applied to members in those regions, we held ourselves to those standards. For our US members, we apply the same standards of transparency, security and control as our baseline, and we honour the stronger of the applicable state laws, including the California Consumer Privacy Act as amended.
When you join. Your name, your email address, the jurisdiction you select, your confirmation that you are 19 or over, the age you enter at the age gate, the plan you choose, your membership status, your account identifier, the date you joined, the date you cancel if you do, and your consent choices.
Your consent record. Every time you agree to something, we save exactly what you were shown, the wording in full, a version number for that wording, the date and time, which page you were on, your jurisdiction, and your age confirmation. We do this so that both you and we can see precisely what you agreed to, and when.
Correspondence, once it begins. When your letters start, we hold the letters we send you, the replies you send us, when each was sent and delivered, whether a message was written by a person or with AI assistance, and any support conversation about it.
Payment. Your card details go directly to our payment processor. We do not store your full card number or security code. We do receive confirmation that a payment went through, a transaction reference, the plan and amount, the currency, the date, and any refund or dispute status.
Technical information. Your IP address, device and browser type, session and log data, security events, and how you arrived at our site.
Some things you might want to write to us about — your relationships, your feelings, your health, your private life — are treated as especially sensitive. In some US states, information about your health, your sex life or your sexual orientation falls into a category that gets extra protection, and in other states it may be treated as confidential under general privacy law.
We do not ask you for any of it. Please do not send us information you would not want us to hold.
If you do choose to send us something sensitive, we will only process it where the law allows us to, and where your explicit permission is needed we will ask you for it separately — not as part of signing up. You can take that permission back at any time, and we will explain what changes if you do.
We do not sell your personal information, and we do not share it for other companies' advertising.
We can only use your information if we have a lawful reason. Ours are:
To give you what you paid for — running your membership, sending your letters, answering your replies, and handling payment. This is called performance of a contract.
To meet our legal duties — keeping tax, accounting and compliance records, and responding to lawful requests.
For our legitimate interests — keeping the Service secure, preventing fraud and abuse, proving that you agreed to something, and dealing with disputes. We only rely on this where your rights do not outweigh ours.
With your permission — for anything optional, including messages about offers and news, and for any sensitive information you send us. Where we need your permission, we ask for it separately and you can withdraw it at any time.
To create and run your membership. To send your letters and answer your replies. To show whether a message was written by a person or with AI. To take payments. To answer your questions. To keep the Service safe and stop abuse or unauthorised sharing. To keep the records that prove what you agreed to. To deal with cancellations, refunds and disputes. To improve how the Service works. To meet our tax and legal obligations. And, only if you have asked us to, to send you news and offers.
We do not use your information to make automated decisions that have a serious effect on you.
When you agree to something, we save the exact wording you were shown, along with a version number, the time and date, and your choices at that moment. This record is written once and cannot be edited or overwritten afterwards. It starts empty — nothing is recorded as agreement unless you actively agree to it.
If you change your mind, we add a new entry saying so. We do not delete the original. That matters, because it is the record of what you agreed to at the time — and it is how we can prove, to you or to a regulator, that we had your permission for what we did.
Taking back permission does not erase the fact that you once gave it. It stops us using it going forward.
There are a small number of situations where we cannot delete a record even if you ask us to — for example where we must keep it to prove what you agreed to, to meet tax rules, or to defend a legal claim. We keep those situations as narrow as we can, and we write down our reasoning each time.
Mr. Ugly is a character. The letters are written by a real person working with AI assistance, and every message you receive tells you whether it came from a person or from the AI.
To build and answer the letters, your information may be handled by companies that provide AI, hosting, email delivery, payment and support services on our behalf. They can only use it on our written instructions, and they must keep it confidential and secure.
Our position is that these providers do not use anything you send us to train their own AI models. We check that each provider's terms and settings actually match that position before your information goes anywhere near them.
A person reviews messages before they go out.
Only where we need to, and only with organisations that help us run the Service — the providers described above, our professional advisers, our insurers, and our auditors.
We may also have to share information with regulators, the police, or a court, where the law requires it.
We do not sell your information. We do not share it for anyone else's advertising.
If our business is ever sold, restructured or merged, information may transfer as part of that — and we will tell you if that happens.
Depending on which US state you live in, you may have some or all of the following rights over your personal information. The strongest version of each right applies to you.
We do not sell personal information or use it for cross-context behavioural advertising, so there is generally nothing to opt out of — but if that ever changes, we will tell you and provide the opt-out the law requires.
To make a request, email [email protected]. If we need to check who you are before responding, we will ask you for the minimum necessary. We respond within 45 days, or tell you if a complex request needs longer, as US law allows. If we decline a request, we will tell you why and how to appeal where your state provides for appeals.
The right to deletion is not absolute. We may need to keep a limited amount — for example to prove what you agreed to, to honour a request not to be contacted, to meet tax rules, to complete a transaction you started, or to detect security incidents.
We keep everything else only as long as we actually need it.
We use appropriate technical and organisational safeguards, including access controls, encryption, security logging, staff authentication, restricted access to correspondence, incident response procedures, and checks on the companies we work with.
Your agreement records are written once and cannot be edited, and they are kept separate from our day-to-day systems.
Messages you send through the Service pass through a filter that looks for phone numbers and email addresses and blocks them from appearing. That filter reduces risk; it cannot catch everything. Please do not send information you would not want us to hold.
We do not store your full card details.
If we ever become aware of a breach affecting your information, we will assess it and tell you and the relevant authorities where the law requires.
We use essential cookies and similar technologies to keep you signed in, apply the age gate, keep the Service secure, prevent abuse, and remember your choices. These are necessary for the Service to work.
If we ever want to use anything non-essential, such as analytics, we will ask you first and you can say no.
This Service is for people aged 19 or over. It is not offered to anyone under 19.
If we learn that a member is under 19, we close the account and delete their personal information, except for the limited records we are required to keep for legal, security, tax or dispute reasons.
We do not make decisions about you by automated means that have a legal or similarly serious effect. AI helps us write and answer letters. It is not used to decide anything about your eligibility, your money, your credit, or your access to anything that matters. Where state law gives you the right to opt out of profiling in furtherance of decisions with legal or similarly significant effects, there is nothing to opt out of, because we do not do this.
If you are unhappy with how we have handled your information, please tell us first at [email protected] and give us the chance to put it right.
If you are in a US state with its own privacy law, you may also have the right to complain to your state's Attorney General. If you are in California, you may contact the California Privacy Protection Agency or the Attorney General.
If we change this policy we will publish a new version with a new version number and date. Where a change matters, we will tell you by email or in your account. We keep every version we have published, and we can tell you which one applied to you.
Privacy requests and taking back your permission: [email protected]
Membership, billing and anything else: [email protected]
Legal notices and copyright: [email protected]
Post: Redwood River Enterprises, LLC, 4539 N 22nd St, Ste N, Phoenix, AZ 85016, United States