Privacy Policy

1. Scope

This policy describes how the Maeistro application handles information when you visit the site, sign in or use its AI CMO research workspace. It should be read alongside our Terms of Service.

2. Information we process

• Account information provided through Google sign-in, such as your email address, name, profile image and account identifier.
• Information you enter, including brand websites, briefs, competitor lists, settings and chat messages, together with generated research and recommendations.
• Technical information needed to operate and protect the application, such as session identifiers, request details, device or browser information and error logs.

Google sign-in does not give Maeistro access to your Google password. Signing in alone does not grant access to Gmail, Google Drive or Google Ads.

3. Why we use information

We use information to authenticate you, save and restore your work, generate the research you request, maintain the application, troubleshoot errors and prevent abuse. Where applicable, processing relies on providing the requested service, legitimate interests in operating and securing it, legal obligations, or consent when required.

4. AI processing and service providers

Brand context, competitor details and relevant chat or research content are sent to AI services through the Lovable AI Gateway to generate responses. Lovable Cloud supports account authentication and saved workspaces; Google supports sign-in. Infrastructure and AI providers process information needed to deliver their services. Their own terms and privacy policies may also apply. Do not submit passwords, sensitive personal information or confidential material you are not authorised to share.

5. Storage, sessions and retention

When signed in, your brand workspaces are stored under your account. Signed-out work is session-only and is not saved to an account. Browser storage and authentication cookies may be used to maintain sessions. Saved work is kept to provide the service until removed or no longer needed; technical records may be retained for security, troubleshooting or legal obligations. Exact retention periods and provider backup deletion timelines remain to be confirmed.

6. Sharing and international processing

Information is shared with service providers as needed to operate Maeistro, and may be disclosed where legally required or necessary to protect rights and security. Providers may process information outside your country. Applicable transfer safeguards depend on the provider arrangements and must be confirmed by the service operator.

7. Security and your choices

Saved workspaces use account-based access restrictions. No system can guarantee complete security. You can edit your workspace, use the reset control to clear a brand’s saved work, sign out and revoke Google access in your Google account. Resetting a workspace is not the same as deleting your account. Depending on your location, you may have rights to access, correct, delete, export or restrict processing of personal information, object to processing, withdraw consent or complain to a privacy authority.

8. Contact and policy updates

The operator’s legal identity and privacy contact are pending confirmation. A dedicated contact for account deletion and privacy requests must be added before this policy is final. We may update this policy as the service changes, with the revision date shown above.