Last updated: July 16, 2026

Mineral Rights Xchange (“MRX”, “we”, “us”) respects your privacy. This policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices available to you. It applies to mineralrightsxchange.com, Ask Tommy and the other fictional MRX AI Guides, private owner accounts and documents, appointment communications, and direct correspondence with MRX.

Information we collect

We collect information you give us directly and information we collect automatically when you use the site.

Information you provide. You can ask a text question without first providing contact information. If you choose to save a conversation, upload a private document, request follow-up, or book a phone call, we may collect your name, verified email, phone number, communication choices, timezone, appointment details, home city or address, mineral-interest locations and legal descriptions, mineral-interest facts, chat messages, and PDF or image files you are authorized to share. Do not upload Social Security numbers, full bank or payment details, passwords, or other information that is not needed for your question.

Information created while assisting you. MRX may store conversation summaries, source citations, structured owner facts with source and confidence information, U.S. Census or BLM geography matches, county candidates, coordinates, match precision and confirmation status, specialist handoffs, attachment-processing status, and appointment records. You can correct information in a conversation or request its deletion.

Information we collect automatically. When you visit the site, we and our analytics providers collect standard web log data (IP address, user agent, referrer, pages viewed) and cookie or similar identifier data. We use this to operate the site, understand traffic, and detect abuse.

Information from third parties. If you reach us through a third-party platform (search engine, social media, or a partner referral link), we may receive basic referral metadata (e.g., search terms, referrer URL) tied to your visit.

How we use information

We use the information we collect to:

• Respond to your inquiry and provide the underwriter review you have requested.
• Generate and improve a requested AI-assisted answer using reviewed MRX information and cited public sources.
• Restore your conversations, source links, owner facts, files, and appointments after you verify and return.
• Match a city, address, coordinate, or supported legal-land description to a state, county, and containing Census place, while marking ambiguous or approximate results for confirmation.
• Send you the free guide if you have requested it.
• Communicate with you only through the appointment and marketing channels you selected.
• Operate, secure, and improve the site (debugging, fraud prevention, performance).
• Comply with applicable law and respond to legal process.

We do not sell your information, and we do not share it with third parties for their own marketing purposes.

Sharing

We share information only as needed to operate the service:

• Service providers and public geography services. Hosting and security providers, Supabase for authentication, database, encrypted raw OCR, and private storage, OpenAI for requested AI-assisted processing, GoHighLevel for contact records, conversation history, redacted document summaries/status, email, SMS, Voice AI, availability, and appointments, the U.S. Census Bureau and Bureau of Land Management public geography services for location matching, and configured analytics providers. Each provider receives information according to MRX’s configuration and agreements.
• Legal and safety. When we believe in good faith that disclosure is necessary to comply with a law, court order, or valid legal process, or to protect the safety of any person.
• Business transfers. If MRX is acquired or sells substantially all of its assets, your information may be transferred as part of that transaction; we will notify you before your information becomes subject to a different privacy policy.

Original owner files and raw OCR remain in private Supabase Storage. The website conversation, email and SMS events, GHL Voice AI transcripts, and redacted document summaries/status may also be copied into the restricted GoHighLevel contact conversation so assigned MRX personnel can review the case in context. Raw document binaries and raw OCR are not copied into GoHighLevel by this website. OCR can reproduce sensitive text present in a file, so owners should avoid uploading Social Security numbers, bank or routing numbers, signatures, or unrelated personal information. We do not share this information with unrelated mineral-rights buyers, marketplaces, or third-party advertisers for their own marketing.

Cookies and analytics

We use an essential, HTTP-only conversation cookie so an anonymous visitor can continue the current chat, along with authentication storage for a verified account. Configured analytics may use cookies or similar identifiers to measure page and feature use. You can control nonessential cookies through your browser settings; blocking essential storage may prevent conversation restoration or sign-in.

Retention

We retain personal information only as long as needed for the purposes described in this policy or as required by law. Verified account holders can export their account data and delete individual documents, conversations, or the account. Deletion may be delayed where a limited record must be retained for security, fraud prevention, an active transaction, or another legal obligation.

Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information, subject to our legal recordkeeping obligations.
• Opt out of marketing communications at any time (using the unsubscribe link in any email or by replying “stop”).
• Request a copy of the information you have shared with us in a portable format.

To exercise any of these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

State privacy notices

Depending on where you live, state privacy law may provide additional rights, including the right to appeal a decision about a privacy request. MRX will apply verified rights requests according to the law that applies to the requester.

Children’s privacy

The site is not directed to children under 18, and we do not knowingly collect information from children.

Security

We use safeguards designed for the sensitivity of the information, including encryption in transit, private storage, row-level access rules, expiring upload links, file-type and signature checks, quarantine, configured malware scanning, access controls, rate limits, and audit records. No system is perfectly secure; if you believe your interaction with us is no longer secure, notify us promptly.

Changes to this policy

If we make material changes, we will update the “Last updated” date at the top of this policy and, where appropriate, notify you by email. Continued use of the site after a change indicates that you have read the updated policy.

Contact

Questions, comments, or requests related to this policy should be directed to our team through the contact form on the site or by writing to the address listed on our About page.