Privacy Policy

This policy explains how Maison handles information from its website and iPhone app, including account, property-analysis, support, and subscription features. It describes our practices; it does not replace any permission that we must separately obtain. For privacy requests or questions, contact hello@maisonre.app or use the Your Privacy Choices page.

From you: name and email, investor preferences, property addresses and listing links, financing and renovation assumptions, selected photos, messages, research requests, feedback, and support correspondence. Content can include personal information you choose to provide; avoid uploading identity documents, access codes, faces unrelated to property analysis, or unrelated sensitive information. From your use: account/user IDs, saved reports, conversations and scenarios, analysis usage, language and consent preferences, and technical information such as IP addresses, browser/device information, request and error logs. We also keep the legal and analysis permission versions, choices and timestamps associated with your account, your adult/U.S.-residency and analysis-limit confirmations, and privacy-request details and response records. Session information and drafts can be stored on your device. From providers: RentCast property/listing information; AI analysis results; Apple sign-in identifiers and any name/email you authorize, including a private-relay email if chosen; and Stripe/Apple subscription product, transaction, status, and expiry information. Payment processors handle payment credentials; Maison does not receive your full card number. We do not request access to your contacts, microphone, or device GPS location. Entered property addresses can themselves identify a person or property. Optional Community information is described in the Community section below.

We use information to authenticate accounts; produce, save, and display requested analysis; personalize calculations using your assumptions; provide support; verify subscription access; communicate about accounts and billing; remember privacy choices; measure usage and troubleshoot problems; prevent abuse; and meet legal obligations. Optional outcome feedback helps evaluate analysis quality. We do not use submitted property content to identify deals for our own investment or sell it as leads. The app sends selected content to the providers described below to perform the requested analysis, rather than treating general acceptance of this policy as permission for every future use. A materially different use requires notice and any legally required consent.

Service providers receive information needed for their roles: Supabase hosts account records, authentication, and application data; Vercel serves the website; Render runs the backend; Resend delivers transactional email; Stripe handles website billing; Apple handles native sign-in and in-app purchases. For requested analysis, Anthropic processes relevant property details, assumptions, conversation/report context and research requests; OpenAI processes chosen property photos and relevant details; RentCast receives property addresses and search parameters to supply property/listing data. AI or web research may involve providers' supporting services. These providers process information under their applicable service and privacy terms, including operational, security, and legal retention. We do not promise that every provider immediately deletes each request. On the website and iPhone app, the analysis permission screen identifies these providers before account-based analysis. You may decline, or withdraw permission for future requests in Settings. Google address suggestions use an additional permission for the addresses you type. We record the current choice and permission version separately from acceptance of the Terms. This limits new AI/data requests; it does not cancel subscriptions or erase earlier requests, saved reports, or provider records automatically. You can separately request deletion. Photo/camera access is optional and you choose what to submit. We may disclose information when reasonably necessary to meet a legal obligation, protect rights or safety, investigate fraud, or respond to a valid request from authorities. If the business is transferred, any recipient must handle transferred information consistently with this policy or obtain required notice and consent before materially changing its use. We do not authorize providers to use your content for their own advertising through our integration.

We do not sell your personal information and do not share it for cross-context behavioral advertising. We have not sold or shared personal information for those purposes in the past 12 months and have no plans to do so.

Depending on your location and whether a law applies to Maison, you may have rights to know/access and obtain a copy of your information, correct it, request deletion, and appeal a denied request. California residents may also have applicable rights concerning sale/sharing, sensitive information, and automated decision-making, subject to the law's scope and exceptions. Maison does not sell personal information or share it for cross-context behavioral advertising, and does not use it to determine a person's housing, credit, employment, or insurance eligibility. Email hello@maisonre.app or use /privacy-choices. Signed-in access, correction and general requests are stored with a receipt for review; submitting a request does not automatically export or change data. Account deletion uses the separate confirmed deletion control in Settings. Signed-out visitors can send a request by email. We verify requests using account information and may need proof that an authorized agent may act for you; do not send passwords, full payment details, or identity documents unless a secure, necessary process is separately arranged. We respond within applicable legal deadlines, generally within 45 days for covered California requests, and explain any permitted extension or denial. To appeal, reply requesting review of the decision. You may also contact the relevant privacy regulator. We do not penalize you for exercising privacy rights, although deleting data or withholding information needed for a requested feature may prevent that feature from working.

Account information, saved reports, conversations, scenarios, preferences and current permission settings are retained while needed to provide your account and requested features, until you delete the relevant records or your account, subject to legal exceptions. Website Settings and the iPhone account/privacy settings offer account deletion. Apple-linked accounts require Apple identity confirmation in the iPhone app. You may also request help or deletion at hello@maisonre.app. Completed account deletion removes account-associated application records from the live service; it does not erase independently retained provider records. Recoverable browser drafts, which may include selected photos and financial assumptions, expire seven days after their last update. Expired drafts are removed when the draft is next read or draft storage is next written; a device that never reopens Maison may retain the underlying browser data longer. Discard drafts or clear Maison site data to remove them immediately. Draft cleanup during account deletion applies to the current browser; remove copies on other devices and exported files yourself. A local account identifier may remain to prevent late writes from recreating deleted drafts. Community profile, photo, post and reply removal is explained in the Community section. Reports, blocks and anti-abuse records have a separate safety purpose; leaving Community does not by itself remove those account records. For requests submitted through the authenticated form, the operational message and response history are scheduled for removal one year after the request closes, or on account deletion. Separate minimal request-handling records contain a request reference, request type and channel, dates, status and decision category for 24 months after each action, followed by scheduled deletion. Their account link is removed on account deletion; they do not contain the submitted message, response text, name, email address or IP address. These minimal records are used for request-handling compliance. Historical analysis-permission events follow a one-year cleanup schedule, or are removed on account deletion; the current permission choice remains while the account exists. We may retain limited transaction, request, permission or security evidence when reasonably necessary to resolve disputes, meet a specific legal obligation or investigate abuse; retention must be limited to that purpose. We retain limited website subscription-authorization evidence separately from your account: the plan, price, recurring-charge disclosure and version, acceptance time, and account/payment reference identifiers. This evidence survives account deletion until both three years after authorization and one year after the confirmed end of the contract have elapsed, or longer if a specific legal hold requires it. Active or unresolved contracts are reviewed before their evidence is removed. These records are used for billing obligations and disputes, not marketing. Payment providers retain their own records under their policies and legal duties. We remove the deleted account’s link from the Apple subscription ownership ledger, but transaction identifiers are not a promise of complete anonymity. Backup copies and provider logs follow the relevant provider’s configured retention and deletion cycle, which can vary by service. They are not an immediate-erasure guarantee. We do not use backups to restore a deleted account for ordinary service use. Contact hello@maisonre.app for information about a particular record, retention criterion or deletion request.

We use account authentication, access restrictions and protections against unauthorized requests to help protect information. These controls reduce risk but do not make any transmission or storage method completely secure. Report suspected unauthorized access or a security concern to hello@maisonre.app without including passwords or sensitive documents. If a breach requires notification under applicable law, we will notify affected individuals as required.

Maison is not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us personal information, contact hello@maisonre.app and we will take appropriate steps to delete it.

Maison uses browser storage and similar technologies for sign-in, security, language and display preferences, account choices, recoverable drafts, and unfinished-work recovery. This includes session/local storage and IndexedDB; some stored drafts include photos or financial assumptions. Blocking or clearing required storage can stop sign-in or recovery. Shared devices can retain data, so sign out and remove site data and exported files when needed. The Cookies and Device Storage page lists the current purposes and controls. Maison does not currently use optional advertising or analytics trackers, advertising identifiers, cross-site advertising pixels, or third-party behavioral-advertising cookies. Provider infrastructure may keep operational logs for delivery, billing and security as described above. We do not change these practices in response to a browser Do Not Track header; our no-sale/no-advertising-sharing practices apply regardless. Global Privacy Control is addressed below. Adding optional tracking would require updating these disclosures and providing choices or consent where required before it starts.

Where required by law, we treat Global Privacy Control (GPC) signals as valid requests to opt out of sale or sharing of personal information. Because we do not sell personal information or share it for cross-context behavioral advertising, GPC aligns with our practices by default.

Maison is currently offered to adult United States residents for U.S. property analysis, and the iPhone app is offered in the United States. Our infrastructure is primarily hosted in the United States; service providers may process information in other locations under their applicable terms. Access from another country does not remove rights that applicable privacy law gives you, and this policy alone does not replace any legally required transfer safeguards.

We may update this Privacy Policy from time to time. Material changes will be communicated via email and in-app notice at least 14 days before they take effect where required. The "Last updated" date at the top will also change.

Privacy inquiries and requests: hello@maisonre.app

Access to identifiable customer content is restricted to authorized operational needs such as support, troubleshooting, security, billing, and lawful requests. Maison’s operator and any staff or contractors must not use customers' property submissions for their own real-estate transactions, sell them as leads, or disclose them for unrelated marketing. Service providers receive only the access needed for their contracted functions. We use access restrictions and available security records to help detect and investigate misuse. Suspected misuse should be reported to hello@maisonre.app for investigation and appropriate corrective action.