Privacy
Maara is designed to support customers in meeting their UK data-protection obligations. This page explains what we collect, why, and how it is protected.
Pending final business confirmation: the legal entity name and registered address, and a nominated data-protection contact or ICO registration reference, must be confirmed before this policy is treated as final.
Who this policy covers
This applies to visitors to this website, people who request a demo, business customers and their staff who use the Maara console, and callers whose calls a business customer forwards to Maara. Callers should also be told how their business handles their information; Maara does not control what a business tells its own customers.
When Maara is the controller
Maara determines how it uses account, authentication, billing, security, support and website-operation information for its own business purposes, including preventing misuse and improving the service.
When Maara is the processor
For callers contacting a customer business, that business is the controller and decides what Maara is authorised to do. Maara processes caller information on that business's instructions to answer calls, check availability, create bookings, take messages and send transactional confirmations, as set out in the data processing agreement.
Information we collect
Website addresses submitted for a demo, and information a demo assistant extracts from a public website. Account details for business staff who use the console, such as name, email and login activity. Caller-facing information needed to handle a call: what the caller says, appointment details, and contact information needed to confirm or follow up. Standard technical and security logs from operating the service.
How we use information
To operate the service: answering calls, checking calendar availability, creating bookings, sending confirmations and owner summaries. To secure accounts, investigate misuse and meet legal obligations. To respond to support and demo requests. We do not sell personal information or use caller information for advertising.
Data minimisation and retention
Call recording is off by default. Full transcripts are not retained by default. Structured outcomes and the minimum operational metadata needed to support a business use configurable retention periods and automated deletion, agreed with each business customer.
Security
Every business's data is scoped to that business's account; a caller can never be given another business's information, and a knowledge base is never shared between businesses. Provider credentials such as calendar access tokens are encrypted at rest and never exposed in the console or a response. Every inbound webhook is signature-verified before anything is processed. Every mutation and provider call is recorded in an audit log.
Sharing and subprocessors
We share information only with the providers needed to deliver the service, such as voice, telephony, calendar and messaging providers, listed with their purpose on the Subprocessors page. Terms with those providers are covered by the Data Processing Agreement. We do not sell personal information or share it with data brokers or advertising networks.
International transfers
Where a provider processes information outside the UK, the applicable safeguards depend on that provider's configuration and are recorded in the subprocessor register and the Data Processing Agreement.
Your rights
Depending on your relationship to the data, you may have rights to access, correct, delete, restrict or object to processing, and to receive your data in a portable format. If your query concerns a call to a specific business, contact that business first, since it controls that data; you can also contact us and we will help route the request. UK residents can also complain to the Information Commissioner's Office.
Cookies and the marketing site
This marketing site does not set analytics or advertising cookies. The Maara console uses a single essential session cookie so a signed-in operator stays logged in; it is not used for tracking.
Children
This service is intended for business use. We do not knowingly collect personal information from children, including through the caller channel.
Changes to this policy
We will update this page when our practices change and note material changes here before they take effect.
Contact
Privacy questions: maarareceptionist@gmail.com. For an urgent matter involving a business you have called, contact that business directly; Maara is not an emergency service.