Privacy Policy

From you directly: business name, owner name, contact email and phone, service area, business hours, photos, credentials, and any content you submit through your customer dashboard or tweak requests.

From your visitors (on sites we host): when someone fills in your contact form, we collect their name, email, phone, and message so we can deliver the lead to your inbox. We also log basic request metadata (IP, user agent, timestamp) for spam prevention and operational diagnostics.

From payment processing: when you subscribe, our processor (Stripe) collects your payment details directly. MSM does not store full card numbers; we receive only the last four digits, card brand, and a Stripe customer/subscription ID.

Automatically: we log standard server access data (request URL, referrer, IP, user agent) for the sites we operate. We do not currently use third-party analytics or advertising cookies.

• To deliver the Service: build and host your website, register your domain, deliver leads, send transactional emails;
• To bill you: charge your subscription, send receipts, follow up on failed payments;
• To support you: respond to questions, process tweak requests, troubleshoot issues;
• To improve the Service: aggregate, anonymized analysis of how features are used.

We do not sell your personal information. We do not share your information for cross-context behavioral advertising.

• Stripe — payment processing and subscription management
• Vercel — website hosting and domain registration
• Resend — transactional email delivery (receipts, lead notifications, support)
• Neon — database hosting
• Mapbox — service-area maps on your website
• Gazelle — optional booking integration, only if you opt in

Each of these providers acts as a processor or sub-processor under our direction. Their use of your data is governed by their respective privacy policies and our agreements with them.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information (subject to legal/contractual retention requirements, e.g. tax records);
• Export your information in a portable format;
• Opt out of any future sale or sharing for advertising (we don't currently do either).

To exercise any of these rights, email hello@mainstreetmaestros.com. We respond within 30 days.

California residents: the rights above include the CCPA/CPRA rights to know, delete, correct, and opt out. We do not sell or share personal information for cross-context behavioral advertising.

We keep your account information for as long as your subscription is active and for a reasonable period afterward to handle billing, tax, and dispute requirements (typically 7 years for financial records). Lead-form submissions on your site are retained until you ask us to delete them or you cancel the Service.

We use industry-standard practices: TLS encryption in transit, encrypted secrets at rest, access controls on internal systems, and Stripe-managed payment data. No system is perfectly secure; in the unlikely event of a breach affecting your data, we'll notify you as required by law.

The Service is not directed to children under 13, and we do not knowingly collect information from children.

We may update this Privacy Policy from time to time. Material changes will be announced by email and posted here at least 30 days before they take effect.

For privacy-related questions or requests, email us at hello@mainstreetmaestros.com.