Privacy Policy.

Information you provide. You may provide your name, email address, business name, website or social links, and the answers or materials you choose to provide through the Brand Assessment or an engagement.

Service and access information. For a purchased Standard engagement, we may process the minimum information required to associate a verified purchase with the eligible engagement, issue purpose-limited access, operate the client home, administer rights/delivery/recovery, prevent fraud and maintain an audit trail. Access credentials are stored and handled as security data; raw access tokens are not retained in ordinary application records.

First-party journey information. Mainmade records bounded events needed to understand the public path from a case study to the Brand Assessment and Brand Playbook. These may include a case view, case-to-Assessment click, Assessment landing, start and completion, together with source, referrer or campaign context and server-owned identifiers used for deduplication and attribution. Brand Assessment answers and contact details are not copied into Marketing event records.

We use information to provide the Brand Assessment and engagement work; process and verify a requested payment; create and protect purpose-limited access; operate delivery, recovery, refunds/reversals and security controls; respond to requests; maintain and improve the service; prevent misuse; and comply with legal obligations. We send marketing only where you separately agree to receive it. Transactional access, payment and service messages do not create marketing consent.

We do not sell personal information. We use service providers only to operate Mainmade:

• Vercel for website hosting and operational delivery.
• Supabase for secure engagement, access, attribution and delivery records.
• Stripe for requested payment processing. Mainmade does not store complete payment-card details.
• Resend for requested transactional service messages and separately consented marketing messages.
• Anthropic when Mainmade processes Brand Assessment answers or source text you explicitly select for a requested Concierge synthesis. Mainmade sends only the selected material needed to generate the requested draft and reviews the result before sharing it.

We may also disclose information when law requires it or to protect the rights, safety or property of Mainmade, customers or others. We do not name a new analytics or advertising provider until it is actually in use and this policy is updated.

Mainmade uses a first-party signed cookie to keep a bounded attribution identity through the public journey and prevent another visitor from claiming a Brand Assessment handoff. It does not contain Brand Assessment answers or contact details. Blocking it may prevent an eligible purchase path from recognizing a completed Brand Assessment.

Purpose-limited customer links are separate from that attribution cookie. They are scoped to a specific engagement, expire, and may be revoked. They are not general accounts or permission to access another customer’s work.

We keep information only as long as needed to provide services, protect access, comply with legal obligations, resolve disputes and enforce agreements. You may request access, correction or deletion, and may opt out of marketing, by emailing hello@mainmade.co. Essential transactional messages for a service you request may still be sent. We use reasonable measures to protect information, but no method of transmission or storage is completely secure.

Mainmade is intended for business owners and is not directed to children. We do not knowingly collect personal information from anyone under 16. Depending on where you live, you may have additional privacy rights. Contact hello@mainmade.co to make a request.

We may update this policy and will revise the Last updated date when we do. Mainmade LLC, Delaware, United States, hello@mainmade.co.