Privacy Policy

1. Who we are

Mahoosuc Solutions (“we”, “us”) operates mahoosuc.solutions and related product surfaces. This policy describes the data we collect, why, and your rights.

2. What we collect

• Account data: email, name, organization, role, password hash.
• Usage data: pages visited, features used, errors encountered. Aggregated where possible.
• Communications: support tickets, contact-form submissions, chat transcripts.
• Payment metadata: invoice records and subscription state. Card details are handled directly by Stripe — we never see or store them.

3. Why we collect it

• To deliver the service you signed up for.
• To bill you and manage subscriptions.
• To detect and prevent abuse (rate-limiting, fraud detection).
• To improve the product (legitimate-interest analytics, consent-gated).

4. Third-party processors

We share the minimum data necessary with:

• Stripe — payment processing.
• Vercel — application hosting.
• Cloudflare — CDN, DDoS defense, CAPTCHA (Turnstile).
• Upstash — rate-limit data store.
• Zoho — CRM, email delivery, scheduling.
• Crisp — live chat (when present on a page).
• Cal.com — appointment booking.

All processors are bound by their own privacy commitments. We do not sell your data.

5. Retention

Account data: kept for the lifetime of your account + 90 days after deletion request. Usage data: aggregated after 12 months; raw events deleted after 13 months. Backups: 30-day rolling window.

6. Your rights

Depending on your location (GDPR / CCPA / similar), you may have rights to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal-hold exceptions).
• Receive an export in machine-readable form.
• Object to certain processing.

To exercise any of these: submit a request. We confirm within 7 days and complete within 30.

7. Cookies

See our Cookie Policy for the categories we use and how to opt out.

8. Contact

Questions or complaints: privacy@mahoosuc.solutions