Skip to main content
Pre-launch · in testing — MaintenanceOS is not commercially generally available yet.

Legal · Draft

Privacy Policy (Draft)

Scaffold privacy notice for the MaintenanceOS marketing website. Headings and one-line placeholders only — pending legal review.

DRAFT FOR LEGAL REVIEW. This page is a scaffold only and is not final legal advice or binding policy.

Last updated: [OWNER: effective / last-updated date]

Who this applies to: Visitors to the MaintenanceOS marketing website and, where relevant, people who submit launch-list, demo, contact, or /create early-access forms.

Contact for this privacy notice: [email protected]. Online enquiries are temporarily unavailable. The contact page shows the same address.

Related: Privacy · Cookies · Terms · Security (product trust narrative — not a substitute for this privacy notice)

About this privacy notice

This draft covers the public MaintenanceOS marketing site and related lead forms; it is not a finished product privacy policy unless counsel extends it.

Who we are (data controller)

[OWNER / COUNSEL: controller identity] — legal entity name, registered address, and ICO registration if applicable. Do not invent details.

Scope of this notice

This notice applies to the pre-launch marketing website only; it does not describe future product or app-account processing unless counsel adds that scope.

Personal data we may collect

Categories only until verified: contact details from forms; a public website URL you submit on /create; hosting/network technical data; privacy-minimised site-use events (event type and pathname only, plus bounded conversion target/lead type where relevant); cookie or similar technology data if introduced (see Cookies); and communications you send us. Stored website.event records exclude visitor identifiers, email, referrer, query string, user-agent, and fingerprints.

How we collect data

Sources include a public website URL you submit on /create, ordinary hosting/network technical data, and any email you send us directly. Website content is used only to extract reviewable business facts; private/internal targets are blocked and missing facts are not invented. Online enquiry forms and the measurement beacon are temporarily unavailable: the previous Railway-hosted control plane returns Application not found, so this site does not post leads or events there and does not claim a submission was stored. Please email [email protected]. No invented business data and no invented third-party lists.

Website URL setup (/create)

When you ask MaintenanceOS to learn from a website, it reads a small, bounded set of public HTTPS pages to extract reviewable business facts. Private and internal network targets are blocked, robots.txt is honoured, and missing facts are not invented. The reviewed setup stays in this browser and is not stored while online enquiries are temporarily unavailable. This browser voice preview does not activate or alter live telephony.

Related: Create from website.

Why we use personal data (purposes)

Placeholder purposes: respond to enquiries and demo requests; operate and secure the site; measure aggregate site use with privacy-minimised first-party events; monitor form/site errors; and improve content. Lawful-basis wording remains for counsel to confirm.

Lawful bases

[COUNSEL: map each purpose] — structure for consent, steps toward a contract, legitimate interests, and legal obligation as counsel directs.

Cookies and similar technologies

See the Cookie notice for categories and consent. No analytics or marketing cookies and no third-party analytics tags are loaded today. First-party operational measurement is cookieless and does not use browser storage or a persistent visitor identifier.

Full detail: Cookie Policy (Draft).

Who we share data with

Current website path uses DigitalOcean for the static site. The previous Railway-hosted control plane is not in service, so lead intake and measurement events are not sent. No third-party analytics vendor is used. Other processor categories remain subject to legal review.

International transfers

[COUNSEL] — placeholder for transfer mechanisms if any processor is outside the UK/EEA.

How long we keep data

[OWNER / COUNSEL: periods] — retention placeholders by category; do not invent numbers.

How we protect data

High-level organisational and technical measures apply; see Security for product trust narrative without over-claiming certifications.

Related: Security.

Your rights

[COUNSEL: confirm wording] — UK GDPR-style rights may include access, rectification, erasure, restriction, portability, objection, withdrawing consent, and complaint to the ICO (DRAFT).

How to exercise your rights

[OWNER: inbox / SLA] — contact method and expected process placeholders for rights requests.

Children

[COUNSEL: age threshold] — this site is aimed at businesses and property professionals, not children.

Changes to this notice

[COUNSEL] — how updates will be shown (date and material-change practice).

Contact us

Privacy contact is [email protected]. Online enquiries are temporarily unavailable.

Contact form.

To be completed by legal review.