Privacy Policy

We collect information to provide and improve the Service. Here's what we collect and why:

We use your information to:

• Provide the Service: Store your writing, sync across devices, manage your account
• Process AI requests: Send selected text to AI providers when you request suggestions
• Improve our products: Analyze usage patterns to enhance features (anonymized)
• Communicate with you: Send account notifications, updates, and support responses
• Process payments: Handle subscriptions and billing through Stripe
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access

When you use AI features, we process your content as follows:

• Selected text is sent to our AI provider (Anthropic, OpenAI, or Google) for processing
• AI providers may temporarily store requests for abuse prevention
• Your content is never used to train AI models
• AI requests are logged for debugging and usage tracking (not for training)
• You can disable AI features entirely in your account settings

We share data only in these limited circumstances:

• Service providers: Infrastructure (Supabase), payments (Stripe), AI (Anthropic, OpenAI, Google)
• Legal requirements: When required by law, subpoena, or court order
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

We never sell your personal information to third parties for advertising or marketing purposes.

We retain your data as follows:

• Account data: Retained while your account is active
• Content: Retained until you delete it or close your account
• Usage logs: Retained for 90 days, then anonymized
• Payment records: Retained for 7 years (legal requirement)

After account deletion, we remove your personal data within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights:

To exercise any of these rights, contact us at privacy@maquet.app.

We use cookies and similar technologies for:

• Essential cookies: Required for the Service to function (authentication, preferences)
• Analytics cookies: Help us understand how you use the Service (can be declined)

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

We implement industry-standard security measures:

• Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Automatic backups and disaster recovery
• Employee security training and access restrictions

While we strive to protect your data, no system is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication when available.

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We process data in the United States. If you're located outside the US:

• Your data may be transferred to and processed in the US
• We use Standard Contractual Clauses for EU data transfers
• We comply with applicable data protection laws

We may update this Privacy Policy periodically. When we make material changes:

• We will update the "Last updated" date
• We will notify you via email for significant changes
• Continued use after changes constitutes acceptance

For privacy-related questions or to exercise your rights: