Privacy Policy

This Privacy Policy describes how Masmer Technologies Inc., a Delaware corporation ("Masmer", "we", "our", "us"), collects, uses, discloses and protects personal information.

This Policy applies to:

our website at masmer.pro and our marketing and early-access pages;

lead and enquiry forms, including Meta Instant Forms used with our advertising;

the Masmer platform, comprising our CRM, our AI tools - Alma, Eliko and Ozeri - our client job portal (Noella) and our electronic signing pages, together with related applications, integrations, documentation, accounts, subscriptions and support we provide to our business customers (together, the "Services"); and

our communications with prospective and current customers.

This Policy does not apply to how Meta or any other third party collects, uses or discloses information under its own privacy policy. If information is passed to us by such a third party, our handling of that information is described in this Policy.

Our intended audience is small home-improvement contractors and similar businesses in the United States. Capitalised terms not defined here have the meanings given in our Terms of Service.

We handle personal information in two distinct capacities. Which one applies determines who controls the information and who you should contact about it.

Where we act as a controller. We determine the purposes and means of processing personal information relating to: visitors to our websites; individuals who submit enquiry, lead or early-access forms; and account holders and Authorized Users, in connection with account registration, billing, support, account administration and our business relationship with them. This Policy governs that information.

Where we act as a processor and service provider. Our business customers - contractors and similar businesses - upload information to the Masmer platform about their own clients, properties, jobs, estimates and invoices, which may include names, addresses, phone numbers and photographs of properties ("Customer Data"). In respect of Customer Data, Masmer acts as a processor and service provider on behalf of that customer. The customer, not Masmer, is the controller and business: it decides what information to collect, how it is used, and how long it is kept. We process Customer Data only on that customer's instructions and as necessary to provide the Services.

If you are a homeowner or client of a contractor who uses Masmer, and you wish to access, correct or delete information held about you, please contact that contractor directly - they control that information. If you contact us about Customer Data, we may direct you to the relevant customer and, where appropriate, may forward your request to them. Our handling of Customer Data is governed by our agreement with that customer, including the data protection terms in our Terms of Service.

Information collected through our AI tools. Some features collect information about a contractor’s own clients directly rather than by upload - for example, when our AI receptionist answers a call placed to the contractor’s business line and takes a caller’s name, number and appointment details. That information is Customer Data on the same basis as information the contractor uploads. The contractor remains the controller and business, and the contractor is responsible for providing any notice and obtaining any consent required by law, including consent to record or transcribe a call where the law of the relevant state requires it. We act only on the contractor’s instructions. We do not use information collected in this way to market to the caller, and we do not contact a contractor’s clients on our own behalf.

Client job portal and electronic signing. Our client job portal (Noella) lets a contractor share a link with its own client showing the status of a job, such as the schedule, payment status, photos and the scope of work. The contractor decides what is shared and with whom, and the information displayed is Customer Data on the same basis as described above. The portal displays information only; it does not accept or process payments. Visits to the portal may involve the strictly necessary and analytics technologies described in Section 5.

Electronic signing. A contractor can send its client a link to review and electronically sign an estimate or contract. When the client signs, we record, on the contractor's behalf, the document signed, the signature, the signer's name, the date and time of signing, and the electronic-signature consent wording shown to the signer. That record is Customer Data and is kept so that what was signed, and when, can be shown later.

3.1 Information you give us

Category

Examples

Why we collect it

Enquiry and early-access data

Name, business name, email address, phone number, trade or specialty, business size, state of operation

To respond to your enquiry, assess early-access requests, and contact you about the product

Account data

Name, business name, email address, phone number, business address, login credentials, user role and, if you connect Ozeri to a messaging service, your account identifier on that service (such as your WhatsApp phone number or Telegram user ID)

To create and administer your account and authenticate users

Billing data

Billing contact, billing address, subscription plan, transaction history, and limited billing metadata made available to us by our payment processor, such as card brand or last four digits

To process subscriptions, invoice you, and maintain financial records

Support data

Correspondence, screenshots, descriptions of issues, and records of support interactions

To provide support and improve the Services

Marketing preferences

Subscription and opt-out status

To send you communications you have asked for, and to honour opt-outs

We do not collect payment card numbers directly. Card details are handled by our payment processor under its own privacy policy.

3.2 Information we collect automatically

We may automatically collect information such as device and browser type, operating system, IP address, general location derived from IP address, pages viewed, referring page, session duration, feature usage within the Services, and error and diagnostic logs. The information we collect depends on how you access and use our websites and Services and on the technologies we use at that time.

3.3 Information from third parties

Advertising and analytics platforms (including Meta) may provide us with aggregate campaign performance data and with lead form submissions you have chosen to send us. If you connect third-party integrations or services to your account, we may also receive information from those providers as needed to support the integration or the Services.

3.4 Sensitive information

We do not seek sensitive personal information. Our Terms of Service prohibit customers from uploading government-issued identification numbers, payment card data other than through our designated payment processor, financial account credentials, health information, biometric data, or other categories of information subject to heightened regulatory protection unless we agree otherwise in writing in advance. If we receive sensitive information despite this prohibition, we may use it as reasonably necessary to provide the Services, protect the Services, comply with law, and address the issue.

We use personal information to:

respond to enquiries and assess early-access requests;

create, administer, secure and support accounts;

provide, operate, maintain and improve the Services;

process payments, manage subscriptions and maintain financial records;

send service and transactional messages, including security alerts, billing notices and renewal reminders;

send marketing communications about our products, where permitted by law and in accordance with your preferences, with an unsubscribe mechanism in our marketing emails;

measure and optimise our advertising using information such as aggregate campaign reports and lead form submissions from the platforms described in Section 5;

analyse usage, diagnose problems and develop new features;

detect, investigate and prevent fraud, abuse and security incidents;

comply with legal obligations; and

establish, exercise or defend legal claims.

We will not use personal information for a materially different purpose that is incompatible with this Policy without notice and, where required by law, your consent.

Marketing transparency. If we use testimonials, endorsements, reviews, influencers or sponsored content, we will disclose material connections as required by the Federal Trade Commission.

We use cookies and similar technologies on our websites and, where applicable, within the Services for the following purposes:

Strictly necessary - to operate and secure our websites and the Services, keep you signed in, and remember basic settings. These cannot be switched off without breaking core functionality.

Analytics - to understand how our websites and product are used, diagnose problems and improve features.

Most browsers let you erase or block cookies through their settings, although this may affect how our websites function and may not remove information already collected.

We do not sell or share your personal information

We do not sell personal information for monetary consideration. We also do not share personal information for cross-context behavioural advertising or targeted advertising as those terms are used in U.S. state privacy laws. We do not use advertising pixels or similar advertising-tracking technologies on our websites.

Advertising on third-party platforms. We do advertise our product on third-party platforms, including Meta. Where you submit an enquiry through a lead form hosted by such a platform (for example, a Meta Instant Form), that platform collects your information under its own privacy policy and passes it to us. We then handle it as described in this Policy. We do not upload customer or contact lists to advertising platforms, and we do not provide personal information to them for audience building, retargeting or targeting.

We do not market to our customers’ clients. We advertise to contractors and similar businesses. We do not send marketing calls, texts or emails to homeowners or other clients of our customers, and we do not use Customer Data for our own marketing.

If this changes. If we introduce advertising or tracking technologies that constitute a sale or sharing of personal information, we will update this Policy and provide any opt-out mechanism required by applicable law before those technologies go live. Any such change will apply prospectively, in accordance with Section 15.

We disclose personal information only as reasonably necessary, to the following categories of recipients:

Recipient

Purpose

Cloud hosting and platform providers

Hosting, storage and operation of our websites and the Services

Communications providers

Sending email and SMS on our behalf

Payment processor

Subscription billing and payment processing

Analytics providers

Understanding website and product usage

Advertising platforms

Our own advertising on third-party platforms, including receiving lead form submissions and measuring campaign performance. We do not provide them with personal information for audience building, retargeting or targeting - see Section 5

Telephony and voice AI providers

Answering calls on your business line, generating transcripts and capturing scheduling details, where you enable that feature

Messaging platforms

Operating our messaging assistant (Ozeri) through the messaging services you choose to connect it to, such as Telegram and WhatsApp (provided by Meta Platforms through the WhatsApp Business Platform). Your questions and Ozeri's answers, which may include Customer Data such as client names, job addresses and amounts, pass through those services, which process messages under their own terms and privacy policies

Data and pricing providers

Looking up product prices and availability in supplier catalogues, and public business listings such as reviews of your own business. We do not send your clients' personal information to them

AI service providers

Supporting AI-assisted features, as described in Section 7

Support and business tools

Customer support, CRM and internal operations

Professional advisers

Legal, accounting, insurance and audit services

Authorities

Where required by law, legal process, or to protect rights, safety or property

Acquirers

In connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to this Policy continuing to apply

We do not currently share personal information with affiliates. We require service providers that process personal information on our behalf to protect it and to use it only for the services they provide to us, consistent with our instructions and applicable law.

Parts of the platform use artificial intelligence and machine learning. These include Alma, an AI receptionist that answers calls placed to your business line outside your business hours and handles scheduling; Eliko, which generates scopes of work, estimates, materials lists and punch lists, including from home inspection reports you upload; Ozeri, a business assistant that answers questions about your business, and makes the limited changes you confirm, through messaging services such as Telegram and WhatsApp; Noella, the client job portal described in Section 2; and supporting features such as column mapping during data import, message drafting and record summarisation. These features process information you or your business submits, and in the case of Alma information provided by callers, in order to generate the requested output or support the feature.

Our commitments:

We do not use identifiable Customer Data or account holder personal information to train machine learning models that are made available to other customers or to the public.

We may use aggregated or de-identified information - information that does not identify you, your business or any individual - to analyse, improve and develop the Services.

Where we use third-party AI providers, we seek to use providers whose terms restrict them from training their generally available models on identifiable information we send them for our use of the feature.

AI-generated output is produced automatically, may be inaccurate or incomplete, and is provided for your review. It should not be relied on without verification. See Section 12 of our Terms of Service.

Voice calls handled by Alma. Where you enable our AI receptionist on your business line, we and our telephony and voice AI providers process call audio and generate a transcript in order to answer the call, capture caller details and schedule appointments. Call audio and transcripts are Customer Data. You are the controller of that information and you are responsible for any notice or consent required where you and your callers are located, including all-party consent to recording where a state requires it. Where the feature offers retention settings, you can configure whether audio is retained. You can ask us to disable the feature at any time. We do not use call audio or transcripts to train generally available models, and we do not use them for our own marketing.

Documents generated by Eliko. Documents generated for you may contain your client’s name, property address, project details and pricing. We may retain a record of each generated document, together with the version of the software and of any notice displayed, the content generated, the changes you made and the date and time you approved it, so that what was produced on a given date can be reconstructed. That record is Customer Data. Generated documents are issued by you, under your own name and through your own channels; we do not send them to your clients. Pricing and product lookups may be made against third-party supplier catalogues; we do not send your client’s personal information to those providers.

Messages with Ozeri. To connect Ozeri to a messaging service, you send it a one-time pairing code from your Masmer account. We then store your account identifier on that service (for WhatsApp, your phone number) and use it only to recognise you and reply to you. Your questions, Ozeri's answers and any action you confirm are processed by us, our AI service providers and the messaging service, and we keep a log of each exchange for security and audit. Anyone with access to your paired messaging account can see the information Ozeri returns, so keep that account secure and tell us at support@masmer.pro if you lose control of it. We do not use your messaging identifier for marketing.

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, taking into account legal, accounting, security and operational requirements.

Category

Retention

Enquiry and early-access data

Up to 24 months from your last meaningful interaction with us, unless a longer period is reasonably necessary for our records or legal obligations

Account data

For the duration of your account, plus up to 30 days after closure, except where a longer period is reasonably necessary for billing, legal, security or dispute-resolution purposes

Customer Data

As directed by our customer and under our agreement with that customer; following termination of the subscription, generally retained for up to 30 days to allow export, then deleted or put beyond use in the ordinary course, subject to backup cycles and legal retention obligations

Billing and transaction records

7 years, to meet tax and accounting obligations

Support correspondence

Typically up to 24 months from resolution, unless a longer period is reasonably necessary for follow-up, security, training, or legal purposes

Website analytics data

Typically up to 14 months, subject to the settings and capabilities of the analytics tools we use

Call audio and transcripts

As directed by our customer and under our agreement with that customer, and subject to any retention setting available for the feature; deleted or put beyond use thereafter, subject to backup cycles and legal retention obligations

Generated document records

Where kept, retained with the customer account while the subscription is active, and for the same period as other Customer Data after termination, so that a document produced on a given date can be reconstructed

Ozeri exchange logs

For the duration of your account, plus up to 30 days after closure, except where a longer period is reasonably necessary for security, legal or dispute-resolution purposes

Security and access logs

Typically up to 12 months, subject to security and operational needs

Marketing opt-out records

As long as reasonably necessary to honour your opt-out and maintain suppression records

We may keep information longer where required by law, or where reasonably necessary to establish, exercise or defend legal claims, investigate incidents, enforce our agreements, or comply with tax, accounting or regulatory obligations. When information is no longer needed, we delete it, de-identify it, or put it beyond use, subject to our backup and archival processes. Copies may persist in backups until they are overwritten or deleted in the ordinary course.

We implement reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction. The specific measures we use vary based on the nature of the information, the system, and the risks involved, and may include measures such as encryption in transit and at rest, access controls, environment separation, and logging.

No system is perfectly secure, and no method of transmission or storage is completely safe. We cannot guarantee that our systems will be free from unauthorised access. Security also depends partly on you: use a strong and unique password, keep your credentials confidential, enable multi-factor authentication where available, and tell us promptly at support@masmer.pro if you believe your account has been compromised.

Depending on where you live and how you interact with us, you may have some or all of the following rights. These rights are subject to legal exceptions and verification requirements, and apply to personal information for which we act as a controller.

Know and access - confirm whether we process personal information about you and, where applicable, obtain access to it or a copy in a portable format.

Correct - request correction of inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes of processing.

Delete - request deletion of personal information about you, subject to legal exceptions.

Opt out of targeted advertising and of the sale or sharing of personal information. We do not currently engage in any of these activities - see Section 5 - so there is presently nothing to opt out of. If that changes, we will provide any mechanism required by applicable law before it does.

Opt out of profiling producing legal or similarly significant effects. We do not currently engage in such profiling in our controller activities.

Non-discrimination - we will not unlawfully discriminate against you for exercising a privacy right.

Appeal - if we decline your request, you may appeal our decision where applicable law provides that right.

Unsubscribe - opt out of marketing emails using the link in any message, or by emailing us. We will still send service and transactional messages where needed.

How to exercise your rights. Email support@masmer.pro. Where the Services provide the functionality, account holders can also access, correct and export certain information directly from account settings.

We will take reasonable steps to verify your identity by matching the information you provide against our records, and may request additional information where necessary. If we cannot verify you, we may decline the request and will explain why, subject to legal limitations. An authorised agent may submit a request on your behalf with proof of authorisation; we may also ask you to verify your identity directly where permitted by law.

We will respond within the timeframe required by applicable law, and may extend that period where the law permits.

If your information is Customer Data - that is, if a contractor using Masmer holds information about you - we cannot usually act on your request directly because we process that information on the contractor's behalf. Please contact that contractor. See Section 2.

Several U.S. states have comprehensive privacy laws, including California (the CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Texas and others. These laws apply to a business only where it meets the applicable thresholds, which differ by state and may change. We aim to honour the rights described in Section 10 for residents of those states where reasonably practicable, even where a particular law may not currently apply to us, but this does not mean every state law applies to Masmer today. Where a law does apply to us, we will comply with it.

Categories of personal information we collect are described in Section 3, the purposes in Section 4, the categories of recipients in Section 6, and retention in Section 8.

Sale and sharing. We do not sell personal information for monetary consideration, and we do not share it for cross-context behavioural advertising or targeted advertising. See Section 5.

Sensitive personal information. We do not seek to collect sensitive personal information for the purpose of inferring characteristics about individuals, and we do not use or disclose sensitive personal information beyond the purposes permitted by law.

California residents may also request information about certain disclosures, if any, for direct marketing purposes under California's "Shine the Light" law by emailing support@masmer.pro.

The Services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16 in our controller activities. If we learn that we have done so, we will take appropriate steps to delete it. If you believe a child has provided us information, contact support@masmer.pro.

Our websites and the Services may link to or integrate with third-party websites and services. Those third parties collect and use information under their own privacy policies and terms. We do not control them and are not responsible for their practices. To exercise rights over information held by a third party, contact that third party directly.

The Services are offered to businesses located in the United States. We do not target or actively offer the Services to individuals or businesses in the European Economic Area or the United Kingdom, and we have no establishment or operations there.

Our systems and those of our service providers are primarily located in the United States. If you access our websites from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country. By using our websites, you understand that your information will be processed in the United States.

If we begin actively offering the Services in the EEA or UK, we will update this Policy and implement any additional measures required by applicable law.

We may update this Policy. The current version is posted on our websites, with the "Last updated" date revised.

Non-material changes take effect when posted. Material changes take effect no earlier than 30 days after we notify you by email or by prominent notice on our websites or within the Services, unless a shorter period is required to comply with law or to address urgent security or operational issues.

We will not apply a materially different practice to personal information we collected before a change takes effect without first obtaining any consent required by law. Changes apply prospectively.

Masmer Technologies Inc.

210 W 89th St, New York, NY 10024

United States

Privacy enquiries and rights requests: support@masmer.pro

General support: support@masmer.pro

If you are not satisfied with our response, you may complain to your state Attorney General or other competent authority where applicable.