Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains how Maintral (“Maintral,” “we,” “us”) collects, uses, and shares information when you use our booking and business-management platform.

1. Our role

For information about your own Maintral account (such as your business profile and billing), Maintral acts as the controller. For the client data that an Operator collects and processes through Maintral (such as their customers’ names, contact details, and bookings), Maintral acts as a processor on the Operator’s behalf; the Operator is the controller of that data and is responsible for having a lawful basis to use it.

2. Information we collect

Account & business data you provide: name, email, phone, business name, location, services, and settings.
Client data Operators enter or import: client names, contact details, appointment history, notes, and messages.
Payment metadata: limited details about transactions (such as amounts and status) needed to reconcile deposits. Card numbers are handled by our payment processor; we do not store full card details.
Usage & device data: log data, device and browser information, and basic analytics needed to operate and secure the service.

3. How we use information

To provide, maintain, and improve the service.
To process bookings and reconcile deposits on the Operator’s rail.
To send transactional messages (confirmations, reminders) on an Operator’s behalf.
To provide AI-assisted features (such as drafting messages and surfacing insights) grounded in the Operator’s own data.
To secure the service, prevent abuse, and comply with legal obligations.

4. Service providers we share with

We share data with vendors who process it on our behalf solely to provide the service, including: hosting and database (Supabase, Vercel), payment processing (such as Stripe), messaging and voice (such as Twilio), email delivery (Resend), AI features (Anthropic), and, where an Operator connects them, accounting and other integrations (such as QuickBooks, Xero, or Google). We do not sell personal information.

5. Messaging & consent

When an Operator sends messages through Maintral, the Operator is responsible for having any required consent from recipients and for honoring opt-out requests. Standard message and data rates may apply to recipients. Reply STOP to opt out of SMS where supported, or contact the Operator.

6. Cookies & analytics

We use essential cookies and limited analytics to operate and improve the service. Where required, we ask for consent for non-essential cookies.

7. Data retention

We retain account and business data for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Operators can request deletion of client data they control.

8. Security

We use technical and organizational measures designed to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Maintral operates across regions and may process data in countries other than where you are located, including the United States. Where required, we use appropriate safeguards for such transfers.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale or sharing (we do not sell personal information). To exercise rights regarding data an Operator controls, contact that Operator; for data we control, contact us. We will respond as required by law.

11. Children

The service is not directed to children under 16, and we do not knowingly collect their personal information.

12. Changes

We may update this Policy from time to time. Material changes will be indicated by updating the date above and, where appropriate, by additional notice.

13. Contact

Privacy questions or requests: privacy@maintral.com.

This document is a template provided for convenience and is not legal advice. Have it reviewed by a qualified attorney and tailor it to your actual data practices and jurisdictions before relying on it.