Legal
Privacy Policy
Effective as of 2 October 2026. This policy explains what data we collect and how we use it.
This Privacy Policy explains how S.R.L. MAVERICK ONE collects, uses, stores and shares information when you use Maverick, including our website at usemaverick.io, our application at app.usemaverick.io, the Maverick assistant on supported messaging channels such as iMessage, and connected-service features (the “Service”).
Maverick is intended for people aged 18 and older, as stated in our Terms of Use.
Any translation from the English version is provided for your convenience only. In the event of any difference in meaning or interpretation between the English language version of this Privacy Policy available at https://usemaverick.io/privacy, and any translation, the English language version will prevail. The original English text shall be the sole legally binding version.
“GDPR” means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“EEA” includes all current member states to the European Union, the European Free Trade Association and the Central European Free Trade Agreement. For the purpose of this policy EEA shall include the United Kingdom of Great Britain and Northern Ireland.
Terms not defined in this policy shall have the meanings set out in the GDPR, unless stated otherwise.
TABLE OF CONTENTS
1. CATEGORIES OF PERSONAL DATA: HOW WE COLLECT, WHY WE PROCESS, AND ON WHAT LEGAL BASIS
Google Workspace data, AI processing and deletion controls
2. WITH WHOM WE SHARE YOUR PERSONAL DATA
3. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS
4. ADDITIONAL INFORMATION FOR EEA-BASED USERS
5. ADDITIONAL INFORMATION FOR THE U.S.-BASED USERS
8. INTERNATIONAL DATA TRANSFERS
10. CHANGES TO THIS PRIVACY POLICY
11. PERSONAL DATA CONTROLLER AND CONTACTS
1. CATEGORIES OF PERSONAL DATA: HOW WE COLLECT, WHY WE PROCESS, AND ON WHAT LEGAL BASIS
We collect information you provide when you create an account, including by messaging Maverick on a supported messaging channel, set up your assistant, send messages, upload files, contact us or connect another service. We also collect information about use of the Service and information returned by the services you authorize, as described below.
For more details on how we collect data, the nature and purpose of its processing, and the legal basis for processing, see below.
| Type of personal data | Nature and Purpose of processing | Legal basis for processing |
|---|---|---|
| Data you give us | ||
| Phone number or messaging identifier | When you message Maverick on a supported messaging channel, such as iMessage, we receive the phone number or other identifier you message from. We use it to create and recognise your account, deliver the assistant’s replies and the reminders and follow-ups you ask for, link your account if you later sign in on the web, and keep the Service secure. | To perform our contract with you. Without this identifier we cannot provide the Service over a messaging channel. Our legitimate interest in ensuring the security of the Service and preventing abuse. |
| Email address | If you sign in to our web application or make a purchase on the Service, we will ask you to provide an email address. If you use Maverick only through a messaging channel, such as iMessage, you can use the Service without giving us an email address. Where we have your email address, we use it to provide access to the Service, send transactional emails such as invoices and subscription renewals, and communicate with you about the Service (for example, reminders or notifications about new features). To opt out of receiving push notifications, you need to change the settings on your device. To opt out of receiving emails, you should click the unsubscribe link in the footer of each email. We may also process your email for our marketing campaigns. As a result, you will receive information about our products, such as special offers or new features and products available on the Service. If you do not want to receive marketing emails from us, you can unsubscribe following instructions in the footer of the marketing emails. | To perform our contract with you. Features that depend on an email address, such as web sign-in and purchases, cannot be provided without it. Compliance with legal obligations regarding transactional emails and/or our legitimate interest to send you such emails. Your consent in case of marketing emails. |
| Name | If you choose to provide your name, we use it to display in your profile. Providing your name is voluntary. | Your consent. |
| Photo | If you choose to upload a photo to your profile, we use it to display in your profile. Providing a photo is voluntary. | Your consent. |
| Age and onboarding answers | We process your age bracket and the answers you provide during onboarding (quiz/survey responses, general persona traits such as hobby and digital skills) to adjust the content of the Service and provide content tailored to your personal preferences. As a result of such processing, you get access, for example, to an automation experience designed for your goals. | To perform our contract with you. Without your age and onboarding answers we cannot customize your experience. |
| Account, business and task content | Account and business details, assistant preferences, instructions, chats, messages you exchange with the assistant on messaging channels, uploaded files and task results. We use this information to provide your assistant, maintain task history and continue work across sessions. If you add Maverick to a group conversation, we also process messages sent by other participants in that conversation in order to respond. | To perform our contract with you and provide the features you request. |
| Data we collect automatically | ||
| Device and system data | We collect data from your device. Examples of such data include: UUID and other unique identifiers, browser type, device type and model and hardware specifications, display and system settings (screen resolution, system language), operating system version, Internet service provider and mobile carrier, Facebook ID and other social media identifiers. We also record the ads in our Service with which you interact (and the Internet links to which those ads lead). | To perform our contract with you. We cannot provide you access to the Service without collecting some device data. Our legitimate interest to analyse your interaction with the ads and to better understand what categories of users use our Services. As a consequence, we often decide how to improve the Service based on the results obtained from this processing. |
| IP address and time stamp data | We collect your IP address and time stamp and time zone to provide access to the Service, ensure security, and tailor the Service to your region. | To perform our contract with you and our legitimate interest to ensure security of the Service. |
| Referring App or URL | We collect data about your referring app or URL (that is, the app or place on the Web where you were when you tapped/clicked on our ad). | Our legitimate interest to estimate the efficiency of our ads. |
| Usage data | We record how you interact with our Service. For example, we log what pages you have viewed, the features and content you interact with, how often you use the Service, how long you are on the Service, your purchases, and your interactions with ad campaigns. We also collect performance and stability logs (crash reports, load times). | Our legitimate interest to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products. We also use such data for statistical analysis purposes, to test and improve our offers. |
| Transaction data | When you make payments through the Service, you need to provide financial account data, such as your credit card number, to our third-party service providers. We do not collect or store full credit card number data, though we may receive credit card-related data, data about the transaction, including: date, time and amount of the transaction, the type of payment method used. | To perform our contract with you. Without transaction data we cannot process your payments for the Service. |
| Cookies | A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. Cookies can be either session cookies or persistent cookies. A session cookie expires when you close your browser and is used to make it easier for you to navigate our Service. A persistent cookie remains on your hard drive for an extended period of time. We also use tracking pixels that set cookies to assist with delivering online advertising. Cookies are used, in particular, to automatically recognize you the next time you visit our Service. As a result, the information, which you have earlier entered in certain fields on the Service may automatically appear the next time when you use our Service. Cookie data will be stored on your device and most of the times only for a limited time period. | To perform our contract with you – in case of necessary cookies. Without necessary cookies we will not be able to provide you access to the Service. Our legitimate interest in collecting statistics to enhance our Service and ads and/or your consent – in case of cookies that are not necessary. |
| Data provided by third parties | ||
| Google account and service information | Name, email address, profile picture and information you authorize for connected features. See Google Workspace data for details and controls. | To provide your chosen sign-in method and requested features under our contract with you; consent where required. Google-specific use restrictions apply. |
| Advertising IDs | We may collect your device’s advertising identifier, such as the Google Advertising ID (“GAID”), when you access our Service from a mobile device. You can typically reset these numbers through the settings of your device’s operating system (but we do not control this). | Our legitimate interest in making ads more relevant for users. |
Google Workspace data
Signing in with Google shares your basic profile information. Access to Gmail, Drive and other Google services requires an additional connection that you authorize.
Maverick uses relevant information to carry out the supported tasks you request, including scheduled tasks you enable. Depending on the permissions you grant and the feature, actions can read, create or change information in your Google account.
| Service | Information used | Examples of permitted task actions |
|---|---|---|
| Gmail | Message content and headers, recipients, attachments, labels and supported mailbox settings. | Find and summarize messages; draft or send email; organize messages and labels; manage supported filters and settings. |
| Calendar | Event details, calendar metadata, attendees and availability. | Find, create, update or delete events and send invitations when included in your task. |
| Drive, Docs, Sheets and Slides | File contents and metadata, documents, spreadsheet cells, presentation contents and file permissions. | Find, read, create or edit supported files and documents; manage files and sharing when included in your task. |
| Meet | Meeting-space identifiers, links and supported settings. | Create meeting spaces and manage supported settings. This does not include account-wide meeting-history access. |
| Forms | Form definitions, questions and submitted responses. | Create or edit forms and retrieve responses. |
Google permissions can allow actions with external effects, such as sending a message, inviting an attendee or changing file access. The available actions depend on the feature and permissions granted. Information returned by Google can become part of chat results, generated documents, saved files, task history and assistant memory.
AI processing
To answer requests and perform tasks, Maverick sends relevant instructions, conversation context and information returned by connected services through Cloudflare to AI processing services, including configured OpenAI model routes. AI processing can also support chat titles and summaries. This involves processing readable task content; it is not limited to transient processing on your device.
Maverick stores information needed for chat history, files and assistant continuity. AI and infrastructure services may also retain request, response or diagnostic information under their applicable terms and settings. AI-processing retention is separate from information saved in Maverick, and a restriction on model training is not a zero-retention promise. See Data retention.
Google data restrictions and Limited Use
Maverick's use and transfer of Google API information adhere to the Google API Services User Data Policy and the Google Workspace user data and developer policy, including their Limited Use requirements. These protections also cover information derived from Google data and take priority over conflicting provisions of this Privacy Policy.
We use Google information only for the permitted user-facing features you authorize. We prohibit its sale, use for advertising or marketing audiences, transfer to data brokers, and use for creditworthiness or lending decisions. General analytics, marketing and affiliate provisions elsewhere in this policy do not authorize these uses.
Transfers of Google information are limited to consented user-facing features, necessary security purposes, legal requirements, or a merger, acquisition or asset sale after your explicit prior consent. Human reading is restricted to your documented agreement to view specific information, necessary security or legal access, or aggregated and anonymized information used for lawful internal operations as Google permits.
We do not retain, use or share Google Workspace information, or allow providers to do so, to create, train or improve non-personalized AI or machine-learning models. Saved task context and assistant memory used for your own work are distinct from training models for general use or other users.
Manage and delete Google-related data
- To disconnect Google in Maverick, open Integrations, find Google Workspace and select Disconnect. Using Disconnect in Maverick marks the connection revoked locally and requests revocation from Google. You can also remove access in your Google Account connections. Neither action deletes information already saved in Maverick.
- To delete a chat from your history, open the chat, select Chat options (the three-dot menu), choose Delete and confirm. Saved files, document versions, assistant memory, runtime copies and provider records are handled separately. Deleting a visible chat does not by itself establish erasure from all of these systems.
- For access, export or erasure requests covering saved information, contact contact@usemaverick.io with the account and scope of your request. Do not include passwords or access tokens. We may need information to verify that you are authorized to make the request. We respond within the time limits required by applicable law.
Disconnecting Google or deleting copies in Maverick does not automatically remove original emails, events or files from Google, or copies held by recipients and other destinations you selected. Requesting an action on the original resource is separate from managing information saved by Maverick.
2. WITH WHOM WE SHARE YOUR PERSONAL DATA
We share information with providers that help operate the Service and with destinations you authorize. The Google Workspace data restrictions apply throughout this policy, including the tables below and the U.S. disclosures. General marketing, analytics, affiliate and business-transfer provisions do not expand our rights to Google API information or information derived from it.
2.1. Service providers
We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We may share your personal information with the following types of service providers:
| Categories of Third Party recipient | Nature of Third Party Recipient | Categories of personal information shared |
|---|---|---|
| Cloud storage service providers | Infrastructure providers that host the application, databases, files and assistant runtime. Cloudflare provides application infrastructure, file/runtime storage and AI routing. | Account information, task content and other data needed to operate the relevant feature, subject to the Google-specific restrictions. |
| AI processing providers | AI services used to generate answers and task results, including OpenAI model routes accessed through Cloudflare. See AI processing. | Relevant instructions, conversation context, connected-service information and task outputs needed for the feature, subject to the Google-specific restrictions. |
| Gateway service providers and payment processors | Providers that process purchases, subscription billing and payment-related transactions. | Identifiers Onboarding and product usage data Commercial information Device and geolocation data |
| Data analytics providers | Providers that help measure website/product use, performance and reliability. | Usage, device and diagnostic information. Google Workspace content and derived information are excluded from general-purpose analytics and remain subject to the Google-specific restrictions. |
| Communication service providers | Providers that deliver account emails, messages on messaging channels, notifications and support communications, or communications you ask the assistant to send. | Contact details and information needed for the communication. Transfers of Google information require a permitted purpose under the Google-specific restrictions. |
| Marketing partners | Third-party partners assisting with marketing activities, including campaign distribution, targeting, and performance measurement (e.g. Google Ads, Facebook Ads). | Marketing identifiers and website/ad interaction information, subject to applicable consent and opt-out choices. Google Workspace information and derived information are excluded. |
2.2. Law enforcement agencies and other public authorities
We may use and disclose personal data to enforce our Terms and Conditions of Use, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law. Any use or transfer of Google API information or derived information remains subject to the Google-specific restrictions.
2.3. Third parties as part of a merger or acquisition
As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy. The Google-specific restrictions govern any Google API information or derived information involved. A merger, acquisition or asset-sale transfer of that information requires your explicit prior consent.
2.4. Affiliates
We may share your personal information with our partner organizations that are part of our corporate group – these are companies that are owned by, own, or are jointly-owned with us. These partner organizations will use the information in ways that align with this Privacy Policy, ensuring that your privacy is respected and protected across all our affiliated services. Any use or transfer of Google API information or derived information remains subject to the Google-specific restrictions.
3. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS
To be in control of your personal data, you have the following rights:
Accessing / reviewing / updating / correcting your personal data. You may review, edit, or change the personal data that you had previously provided on the Service.
Deleting your personal data. You can request erasure by contacting contact@usemaverick.io. Tell us the account and information covered by your request, without sending passwords or access tokens. See Manage and delete Google-related data for the difference between disconnecting, deleting a chat and requesting erasure. Where applicable law requires us to retain particular information, that exception applies only to the information and period required.
Objecting to or restricting the use of your personal data. You can ask us to stop using all or some of your personal data or limit our use thereof.
How to opt out or influence personalized advertising
iOS: On your iPhone or iPad, go to Settings > Privacy > Apple Advertising and deselect Personalized Ads.
Android: To opt-out of ads on an Android device, go to Settings > Privacy > Ads and enable Opt out of Ads personalization. In addition, you can reset your advertising identifier in the same section (this also may help you to see less of personalized ads).
macOS: On your MacBook, you can disable personalized ads: go to System Preferences > Security & Privacy > Privacy, select Apple Advertising, and deselect Personalized Ads.
Windows: On your laptop running Windows 10, you shall select Start > Settings > Privacy and then turn off the setting for Let apps use advertising ID to make ads more interesting to you based on your app activity. If you have other Windows version, please follow the steps available on the Microsoft account ad settings page.
In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:
Network Advertising Initiative - http://optout.networkadvertising.org
Digital Advertising Alliance (EU) - http://www.youronlinechoices.com
To exercise your rights, please provide a request that includes sufficient detail to verify your identity and clearly describe the right you wish to exercise at contact@usemaverick.io. We will only use the personal data provided in a request to verify your identity and respond to it.
Responses will be provided within the time limits required by applicable law. We may refuse requests that are manifestly unfounded, repetitive, or excessive, in which case we will explain our decision.
4. ADDITIONAL INFORMATION FOR EEA-BASED USERS
If you are based in the EEA, you have the following rights:
Access – obtain information about the personal data we hold about you and receive a copy of it.
Rectification – request correction of inaccurate or incomplete data.
Erasure – ask for your data to be deleted from our systems.
Withdraw Consent – where processing is based on consent, revoke that consent at any time.
Portability – receive your data in a structured, machine-readable format and have it transferred to another controller, where technically feasible.
Object – oppose processing of your data for certain purposes, such as direct marketing.
Restriction – request that we limit further processing of your data.
Complaint – lodge a complaint with a data protection authority in your country or member state (applicable for EU countries).
To exercise any of your privacy rights, please send a request at contact@usemaverick.io. Where available, you may also exercise certain rights through tools or settings provided directly within the Service.
5. ADDITIONAL INFORMATION FOR THE U.S.-BASED USERS
Depending on the state in which you reside (including but not limited to California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, and other states to the extent they enact privacy laws), you may be entitled to specific privacy rights under state law. These rights apply only to the extent that the relevant state privacy law is applicable to you and to our processing of your personal data. The scope of these rights can vary, and they may be subject to legal conditions or exceptions. If you are uncertain whether these rights apply to you or would like further clarification, you may reach out to us at contact@usemaverick.io.
For California residents, this also serves as our California Notice at Collection.
The definition of “Personal Information” may vary by state law. Generally, it refers to “information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household”. Terms mentioned in this Section shall have the meanings set out in the respective state privacy laws.
Categories of Personal Information We Collect and Share
The table below outlines the categories of Personal Information we collect and the third parties with whom such data may be shared. For more details, refer to Section 1. Please note that certain categories of such personal information may qualify as sensitive personal information as defined under applicable U.S. privacy laws. Google API information and derived information are governed by the Google-specific restrictions, which take priority over general sharing and analytics categories.
| Categories of Third Party recipient | Categories of personal information shared |
|---|---|
| Cloud storage service providers | Account information, task content and other data needed to operate the relevant feature, subject to the Google-specific restrictions. |
| AI processing providers | Relevant instructions, conversation context, connected-service information and task outputs needed for the feature, subject to the Google-specific restrictions. |
| Gateway service providers and payment processors | Identifiers Onboarding and product usage data Commercial information Device and geolocation data |
| Data analytics providers | Usage, device and diagnostic information. Google Workspace content and derived information are excluded from general-purpose analytics and remain subject to the Google-specific restrictions. |
| Communication service providers | Contact details and information needed for the communication. Transfers of Google information require a permitted purpose under the Google-specific restrictions. |
| Marketing partners | Marketing identifiers and website/ad interaction information, subject to applicable consent and opt-out choices. Google Workspace information and derived information are excluded. |
Why we use personal information
We process Personal Information for the following purposes:
To provide and maintain our Services, including account creation, authentication, and access management.
To improve user experience through personalized content, recommendations, and service customization.
To process payments, subscriptions, and transactions.
To conduct analytics and research for product development and service enhancements.
To communicate with users, including customer support, service updates, and promotional offers.
To prevent fraud, security threats, and unauthorized activities.
To comply with legal and regulatory requirements.
For details, see Section 1 and the Google Workspace data restrictions. The general purposes above do not authorize advertising, general-purpose analytics or model development using Google Workspace information or derived information.
What Personal Information We Share
In addition to the table above, our Privacy Policy provides further details regarding the categories of third parties with whom we share Personal Information (see Section 2).
The categories of recipients and information that may be shared for the purposes described in this policy are listed above. For example, diagnostic providers may receive device identifiers needed to investigate reliability issues. These descriptions do not authorize broader use or transfer of Google API information or derived information.
Some U.S. states grant residents the right to opt out of sharing their Personal Information with third parties in exchange for valuable consideration (which may be classified as a “sale” or “share” under state privacy laws, even if no monetary transaction occurs). If you reside in one of these states and would like to limit the disclosure of your Personal Information to third parties for advertising or marketing purposes, please refer to the “Your Rights” section below.
Privacy laws in some U.S. states broadly define the term “sale” and “share” to include sharing of information via cookies, pixels, and similar tracking technologies for certain targeted advertising activities. We do not sell Personal Information for monetary compensation. However, when you visit our websites, we and our advertising partners may collect device data and behavioral insights through tracking technologies, which could be interpreted as a “sale” or “sharing” under state laws, even if no money is exchanged. We do not knowingly engage in sales, sharing, or targeted advertising using the personal information of individuals under 18. These advertising practices exclude Google Workspace information and information derived from it.
Your Rights
Certain U.S. state privacy laws grant residents specific rights regarding their personal information. If you reside in a state with such laws, your rights may include:
Right to Data Portability/Access – you may have the right to request access to the specific pieces of personal information we have collected about you in the 12 months preceding your request. Where applicable, we may provide this data in an electronic, portable, and readily usable format.
Right to Know – you may be entitled to receive information regarding the categories of Personal Information we collected, the sources from which we collected Personal Information, the purposes for which we collected and shared Personal Information, the categories of Personal Information that we sold and the categories of third parties to whom the Personal Information was sold, and the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding your request.
Right to Deletion – you may have the right to request that we delete the personal information we have collected from you. We will use commercially reasonable efforts to fulfill your request, subject to applicable laws. However, we may be required to retain certain information for legitimate business purposes or as required by law.
Right to Correction/Rectification – you may have the right to request correction of inaccurate personal data.
Right to Limit the Use of Sensitive Personal Information – certain states provide the right to restrict how businesses use sensitive personal information.
Right to Withdraw Consent – where applicable, you have the right to withdraw your consent for data collection and sharing.
Opt-out of Data Sharing – you may have the right to opt out of certain uses of your personal information, including:
The “sale” or “sharing” of your personal information as defined under state privacy laws.
The use of your personal information for targeted advertising.
To opt out, you can:
Visit our “Do Not Sell/Share My Personal Data” form.
Use a legally recognized opt-out mechanism, such as the Global Privacy Control (GPC) signal, when accessing our websites.
Submit a request via our support team.
Non-Discrimination
You have the right to exercise your privacy rights without fear of discrimination or retaliation. However, we may provide different levels of service or pricing based on the value of your personal information, as permitted by applicable law.
Submitting a Request
To exercise any of the available privacy rights, please send a request to contact@usemaverick.io or use the privacy features available in our products.
Verification. To ensure that we properly process your requests regarding your rights, we are required to verify your identity. The verification process may vary depending on the type of request and the Service you use. It may include confirming details such as your name, age, email address or phone number, date of subscription purchase, date of last activity, date of account creation, or other relevant Service usage data that reasonably identify you as the account owner. We may also request additional proof of identity if necessary, but we strive to minimize the information required. For certain requests, we may send a verification code or link to authenticate your identity.
Authorized Agent. You may designate an authorized agent to exercise your rights on your behalf. If you have provided the authorized agent with a valid power of attorney, we will work directly with them to process your request. If a power of attorney or similar authorization has not been provided, we will contact you directly to confirm the agent’s authority and collect the necessary verification information. The authorized agent must verify both their own identity and that of the consumer they are representing.
Responses will be provided within the time limits required by applicable law. We may refuse requests that are manifestly unfounded, repetitive, or excessive, in which case we will explain our decision.
Appeals
In certain states, if your request is denied, you have the right to appeal. An appeal must provide enough information to identify the original request and state the grounds for the appeal. We will review and respond within the timeframe set out in applicable laws. If the appeal is again denied, you may escalate the matter to your state’s Attorney General.
Data Retention
See Section 9: Data retention for the categories we retain, their purposes and the available controls. The same Google-specific restrictions apply to retained information and derived information; general business purposes do not override those restrictions.
6. BRAZIL DATA SUBJECT RIGHTS
In accordance with Article 18 of the General Personal Data Protection Law (“LGPD”) the following rights are stipulated for individuals in Brazil:
Confirmation of the existence of processing;
Access to personal data;
Correction of incomplete, inaccurate, or outdated data;
Anonymization, blocking, or deletion of unnecessary, excessive, or unlawfully processed data;
Portability of data to another service or product provider, upon express request, in accordance with Brazilian regulations and subject to commercial and industrial secrecy;
Deletion of personal data processed with the data subject’s consent, except in the cases provided for in Article 16 of the LGPD;
Information on public and private entities with which personal data has been shared;
Information about the possibility of refusing consent and the consequences of such refusal;
Revocation of consent, pursuant to Article 8(5) of the LGPD.
You can submit a request to exercise these rights at contact@usemaverick.io. Please note that in certain circumstances, full compliance with a request may not be possible (for example, if the request is manifestly unfounded, impractical, affects the rights of others, or is not required by law). In such cases, a response will still be provided to inform the requester of the decision.
7. AGE LIMITATION
Maverick is intended for people aged 18 and older. If you believe someone under 18 has provided personal information to Maverick, contact contact@usemaverick.io so we can investigate and take appropriate action.
8. INTERNATIONAL DATA TRANSFERS
We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms and Conditions of Use and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission, or (ii) the European Commission adequacy decisions about certain countries.
9. DATA RETENTION
Retention depends on the information, the feature it supports, your deletion requests, applicable legal obligations and the relevant service-provider terms. Maverick saves chats, files and assistant context to support work across sessions. Information obtained from Google, and information derived from it, remains subject to the Google-specific restrictions while retained.
| Information retained | Purpose and controls |
|---|---|
| Account and connection information | Used to provide your account and connected features. Disconnecting removes the active broker authorization; revoked connection metadata, runtime copies and backups are separate categories. |
| Chats and uploaded attachments | Saved so you can return to prior conversations. Chat deletion removes the conversation from your history and schedules its attachment cleanup. Other saved copies are handled separately. |
| Documents, files and version history | Saved to make outputs available and support document revisions. Restoring a document version can create another saved version; it is not a deletion operation. |
| Assistant context, memory and runtime snapshots | Saved to continue work across sessions and recover the assistant runtime. Removing a visible chat or stopping an assistant does not necessarily remove this context or its recovery copies. |
| AI requests, responses and diagnostic records | May be processed or retained by infrastructure and AI providers under the terms and settings of the relevant service. Operational logs can contain task information. |
| Backups and recovery copies | Retained separately from active records under the applicable recovery configuration. Their handling must be considered separately in a deletion request. |
| Records required by law | Retained where an applicable legal obligation requires particular information for a particular period. Google-specific restrictions continue to apply. |
There is no single retention period for all of these categories. For information about the records associated with your account, or to request access, export or deletion, contact contact@usemaverick.io. The Google data controls explain why disconnecting, deleting a chat and requesting erasure have different effects.
10. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy as the Service or its data practices change. We will notify you of material changes by available means, such as email, a message on the channel you use to reach Maverick, or an in-product notice. If a new use of Google information or a new type of access requires consent, we will request that consent before the new processing begins; continued use of the Service alone does not authorize it.
11. PERSONAL DATA CONTROLLER AND CONTACTS
S.R.L. MAVERICK ONE, a company registered under the laws of the Republic of Moldova, having its registered office at MD-2012, CHIȘINĂU CENTRU, mun. Chișinău, Alexei Șciusev, 64, will be the controller of your personal data.
You may contact us at any time for details regarding this Privacy Policy and its previous versions. For any questions concerning your account or your personal data please contact us at contact@usemaverick.io.
Effective as of: 2 October 2026