Privacy Notice

1. Who is responsible

Makero is operated by Studio Maré. There are two roles, depending on whose data it is:

• Businesses using Makero (account holders) and visitors of our own website: we are the controller of your data.
• Clients who send a job requestor chat with the assistant on a business's page: that business is the controller of your data, and we process it on their behalf. Questions about your request are best asked to that business first. You can always contact us as well.

2. What we collect

• Account data: name, email address, password (stored as a hash), business name and settings.
• Page content: the photos, texts, prices, logo and contact details a business adds to its page.
• Job requests:what a client fills in, such as name, email, phone number, preferred ways of contact, address and postcode, a description of the job, measurements, budget, timing, answers to the business's own questions, photos and drawings, and the language used.
• Automatic emails:a copy of the confirmation and reminder emails sent to clients on a business's behalf, so the business can see what was sent.
• Assistant chats:the messages a visitor sends to the assistant on a page. We store the questions without the visitor's name or contact details, so the business can see what people ask. If a visitor chooses to leave their details in the chat, we pass them to the business.
• Statistics:page views and clicks on links on a page, with the time and the link. We do not store visitors' IP addresses or identities for this.
• Billing data: handled by Paddle as merchant of record. We do not see full card details.
• Messages to us: contact and newsletter sign-ups, if you send them.

3. Why we use it

To run Makero: show pages, receive and pass on job requests, check whether a job is within the business's travel distance, send emails (sign-in links, request notifications, confirmations and reminders), answer questions through the assistant, show statistics to the business, handle payments, keep the service secure, and improve it.

4. Legal basis

• Contract: to provide Makero to account holders.
• On behalf of the business:client data from job requests and chats is processed on the business's instructions, under the processing agreement in our terms. The business decides its own legal basis, usually taking steps at the client's request before a contract.
• Legitimate interests: security, preventing abuse, and statistics that do not identify visitors.
• Consent: the newsletter, and the consent a client gives on the request form.

5. Who helps us (sub-processors)

• Supabase: database, sign-in and file storage (photos from job requests).
• Render: hosting of the application.
• Anthropic (Claude): the AI behind the assistant, the page setup help and the summary of visitor questions (see section 6).
• Resend: sending emails.
• Paddle: payments and invoices, as merchant of record.
• PDOK (Dutch government address service): we send only a postcode to measure the distance to the business. No name or other details.

We do not sell personal data.

6. AI

The assistant on a business's page is an AI system and says so to visitors. To answer, we send the visitor's messages and the information on that page to Anthropic. When a business uses the page setup help, we send the details it enters and text from its website. For the summary of visitor questions, we send the questions without names or contact details. Under Anthropic's commercial terms, data sent through its API is not used to train its models. See Anthropic's Privacy Policy. The assistant never gives binding prices and never plans appointments; those always come from the business itself.

7. Cookies

We only use cookies that are needed to keep you signed in and to protect your account. We do not use advertising or tracking cookies.

8. How long we keep data

• Account data and page content: while the account exists.
• Job requests, their photos and copies of automatic emails: until the business deletes the request or its account.
• Assistant questions and statistics: while the account exists.
• When something is deleted, it is removed from our systems right away and from backups within their normal cycle.
• Billing records: as long as the law requires (Paddle keeps these as merchant of record).

9. Your rights

You can ask for access to, correction, deletion, restriction or a copy of your data, and object to processing. Account holders can delete their account at any time from Account settings. Clients of a business can ask that business, or us at support@makero.app, and we will help.

If you think we do not handle your data correctly, you can complain to a data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

10. Data outside the EU

Some of our sub-processors (such as Anthropic, Resend, Paddle, Render and Supabase) may process data outside the European Economic Area, including in the United States. Where required, we rely on safeguards such as the EU standard contractual clauses or the EU-US Data Privacy Framework.

11. Changes

When we change this notice, we update the date at the top. For important changes we tell account holders by email or in the dashboard.

12. Contact

Privacy questions: support@makero.app.