Privacy Policy

1. Overview

Maestro is built with privacy as a core principle. The AI models that power Maestro run locally on your machine via Ollama — your source code and prompts are never transmitted to TheAlxLabs' servers. This policy describes the limited data we do collect and how it is used.

2. Information We Collect

Account data: When you create an account, we collect your email address and any name you provide. This is stored securely in Supabase.

Conversation data: Your conversation titles and message content are stored in Supabase to provide conversation history. This data is associated with your account.

Usage data: We track the number of messages sent per day and per week for rate-limiting purposes. This data is stored locally in your browser.

3. What We Do Not Collect

Your source code: Because AI inference runs locally via Ollama, the code you share with the AI never leaves your machine. It is processed entirely on your hardware.

Browsing history: We do not track your browsing activity.

Device information: We do not collect device fingerprints, hardware identifiers, or location data.

Third-party analytics: We do not use Google Analytics, Mixpanel, or other analytics platforms on the Maestro application.

4. How We Use Your Information

We use your information solely to: provide and improve the Service; authenticate your account and maintain sessions; enforce usage limits; respond to support requests. We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Storage and Security

Your account and conversation data is stored in Supabase, which provides row-level security and encrypted storage. Supabase is SOC 2 compliant. We use secure HTTPS connections for all data in transit. We do not store your passwords in plaintext — authentication is handled entirely by Supabase Auth.

6. Third-Party Services

We use the following third-party services:

Supabase (supabase.com): Authentication and database storage. Subject to Supabase's Privacy Policy.

Ollama (ollama.com): Local AI model runtime. Ollama runs entirely on your machine; no data is sent to Ollama's servers from your conversations.

Vercel (vercel.com): Hosting of the Maestro web application. Vercel may collect standard web server logs (IP address, request path, timestamp). Subject to Vercel's Privacy Policy.

7. Data Retention

Your conversations are stored as long as your account is active. You can delete individual conversations from the chat interface at any time. You can delete all your conversations from the Settings → Data section. To permanently delete your account and all associated data, please open an issue on our GitHub repository.

8. Your Rights

You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; data portability (export your conversations). To exercise these rights, use the tools in Settings or contact us via GitHub.

9. Children's Privacy

Maestro is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or your data, please open an issue on our GitHub repository at github.com/thealxlabs/Maestro.