Privacy Policy

Who we are

Maestro is operated at maestrofield.com. If you have any questions about this policy or about data we hold on you, contact us at support@maestrofield.com.

What we collect

We collect only the information we need to run the service:

• Account information. Your name, email address, and — if you sign in with Google — your Google profile ID and profile picture. We request only the email and profile OAuth scopes and nothing more.
• Business information. Your business name, type, address, phone number, and the staff members you invite.
• Operational data. Customer records, jobs, estimates, invoices, payments, photos, and notes you create while using Maestro. This data is yours. We store it on your behalf so you can access it from any device.
• Usage logs. Standard server and error logs: IP address, user agent, timestamps, and the path of requests. Used for debugging and abuse prevention.

How we use it

• To create and maintain your account.
• To deliver the core product: scheduling, invoicing, payments, SMS and email notifications to your customers on your behalf.
• To communicate with you about your account and the service.
• To diagnose problems, monitor stability, and protect against abuse.

We do not sell personal information. We do not use your data to train machine learning models.

Who we share it with

Maestro uses a small set of third-party services ("subprocessors") to run the product. Each has its own privacy policy and each receives only the data needed for its role:

• Vercel — hosting and serving the application.
• Supabase — database and file storage (photos, attachments).
• Google — Google Sign-In (OAuth). Only used if you choose to sign in with Google.
• Stripe — payment processing. Card details go directly to Stripe; Maestro never sees or stores them.
• Twilio — sending SMS messages and handling voice calls you initiate from the app.
• ElevenLabs — AI voice for the optional AI phone feature, if you enable it.
• Resend — sending transactional email (invitations, receipts, booking confirmations).

We may disclose information if required by law (for example, a valid subpoena). We will not disclose your data to law enforcement without a lawful request.

Google user data specifically

When you sign in with Google we receive your Google account email, your display name, and your profile picture URL. We use this strictly to create your account and to show who is signed in. We do not request Gmail, Drive, Calendar, Contacts, or any other Google user data. We do not share data obtained from Google APIs with third parties except as necessary to provide the Maestro service, and we do not use it for advertising.

How long we keep it

We keep account and operational data for as long as your account is active. If you delete your account, we remove personal information within 30 days, with limited exceptions where we are legally required to retain records (for example, payment receipts for tax purposes).

Your rights

You can at any time:

• Access the data we hold about you.
• Correct or update it.
• Request deletion of your account and associated data.
• Export your operational data in a machine-readable format.

To exercise any of these rights, contact us at support@maestrofield.com.

Cookies

Maestro uses cookies only for authentication (keeping you signed in) and basic session management. We do not use advertising cookies or third-party analytics trackers.

Security

Data in transit is encrypted with TLS. Passwords are hashed with industry-standard algorithms. We apply least-privilege access internally. No system is perfectly secure, but we take reasonable steps to protect the information you entrust to us.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email and through an in-app notice. The "Last updated" date at the top of the page reflects the most recent revision.

Contact

Questions? Email support@maestrofield.com.