Privacy Policy
Last updated Nov 3, 2026 · MaitreDesk is operated by Stratton Digital LLC (New York).
This Privacy Policy explains how Stratton Digital LLC ("we", "us") collects, uses, and shares information in connection with MaitreDesk and https://maitredesk.com. Our customers are local businesses ("Customers"); the people who message those businesses are "End Users".
1. Information we collect
- Account information: name, email address, business name, role, and organization membership of Customers and their staff, managed through Clerk.
- Business content: the answer sheet, hours, prices, policies, booking links, and settings Customers provide.
- Website chat messages: messages End Users type into the chat widget on a Customer's website, plus the page and technical data needed to deliver them.
- SMS messages: mobile phone numbers, message content, and delivery metadata for texts sent to or from a Customer's number, processed through Twilio.
- Email messages: sender and recipient addresses, subject, and content of emails forwarded to or sent from the Service, processed through Resend.
- Payment information: billing name, email, plan, and payment status. Card details are collected and stored by Stripe; we do not store full card numbers.
- Demo and contact requests: name, email, business, phone, and message you submit on our website.
- Technical data: IP address (stored as a one-way hash for rate limiting), browser information, and logs; bot-protection checks via Cloudflare Turnstile.
2. How we use information
- To provide the Service: route messages, draft and send replies, and show conversations in the dashboard.
- To authenticate users and secure accounts.
- To bill subscriptions and prevent fraud.
- To respond to support and demo requests.
- To monitor, debug, and improve reliability and safety.
- To comply with law and enforce our Terms.
3. AI processing
To draft replies, message content and the Customer's answer sheet are sent to large language model providers through the Vercel AI Gateway. These providers process the content only to generate a response for us. We do not use Customer or End User messages to train our own models, and we do not sell them.
4. Service providers
We share information only with providers that help us run the Service, under contracts that limit their use of it:
- Twilio (SMS and phone numbers)
- Resend (email sending and receiving)
- Clerk (sign-in and organizations)
- Stripe (payments and billing)
- Vercel (hosting and AI Gateway) and the AI model providers it routes to
- Neon (database hosting)
- Upstash (rate limiting)
- Cloudflare (DNS and bot protection)
We may also disclose information when required by law, to protect rights and safety, or in a merger or acquisition, subject to this Policy.
5. SMS terms and mobile information
Businesses using MaitreDesk may reply by text to people who contact them. Message frequency varies based on your conversation. Message and data rates may apply.
- Opt out: reply STOP to any message to stop receiving texts from that number. You will receive one confirmation and no further messages unless you opt back in by replying START.
- Help: reply HELP for help, or email danny.strattondigital@gmail.com.
- Carriers are not liable for delayed or undelivered messages.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Mobile numbers are shared only with service providers, such as Twilio, that deliver the messages.
6. Data retention
We keep Customer Data while the account is active and for up to 30 days after termination to allow export, then delete it, except where we must keep records (for example billing records) for legal or accounting purposes. Customers can delete conversations from their dashboard.
7. Security
Data is encrypted in transit, webhooks are signature-verified, and access is role-based. No system is perfectly secure; please contact us promptly about any suspected issue.
8. Your choices and rights
End Users should contact the business they messaged, or us at danny.strattondigital@gmail.com, to access, correct, or delete their information. Customers can update their account data in the dashboard. Depending on where you live (for example California), you may have additional rights to know, delete, or correct personal information; we will honor verified requests and will not discriminate against you for exercising them. We do not sell or "share" personal information for cross-context behavioral advertising.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect their information.
10. Changes
We may update this Policy and will post the new version here with a new "Last updated" date.
11. Contact
Stratton Digital LLC, New York, USA. Email: danny.strattondigital@gmail.com.