Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Contact details (name, email, phone if provided)
• Account credentials (stored securely; passwords are not stored in plain text)
• Billing details (processed by Stripe; we do not store full payment card numbers)
• Customer support communications
• Order and transaction information (products, membership status, invoices)

1.2 Information Collected Automatically

• IP address, device identifiers, browser type, operating system
• Log data, pages viewed, time spent, referring URLs
• Approximate location (derived from IP)
• Cookies and similar technologies (see Cookies section)

1.3 Information from Third Parties

• Payment confirmations and transaction metadata from Stripe
• Email engagement data from Klaviyo (e.g., opens/clicks, deliverability signals)
• Analytics and advertising data from providers such as Google/Meta/TikTok (if enabled)

Maison Élevée Content Scheduler Application

The Maison Élevée Content Scheduler is an internal automation application operated by Maison Élevée to manage content publishing and analytics across the brand's owned social media accounts. The application is hosted on Cloudflare Workers infrastructure and is not distributed to third parties or made available for public use.

Data the Application Accesses

The Maison Élevée Content Scheduler accesses the following data through authorized API integrations with platforms where Maison Élevée maintains brand accounts:

• TikTok (via TikTok Content Posting API and Display API): Maison Élevée's own brand-owned account content, publishing permissions, video metadata, and aggregated audience analytics (views, likes, comments, watch time) for content published by Maison Élevée.
• Meta (Instagram Graph API and Facebook Pages API): Maison Élevée's owned Instagram Business Account and Facebook Page content, publishing permissions, page-level engagement metrics, and aggregated audience insights.
• YouTube (YouTube Data API): Maison Élevée's owned YouTube channel video metadata, descriptions, tags, chapters, thumbnails, and aggregated performance metrics.
• Google Drive (Google Drive API): Files in folders owned and authorized by Maison Élevée for content scheduling and distribution. The application uses service account authentication and accesses only folders explicitly shared with the service account.
• Stripe (Stripe API): Transaction events for Maison Élevée customers who purchase products on maisonelevee.com. Used solely to route customer email addresses to the appropriate Maison Élevée email marketing list and to update internal order tracking records. No payment card data is accessed, stored, or transmitted by the application.
• Klaviyo (Klaviyo API): Maison Élevée's email subscriber lists and email automation templates. Used solely to add new subscribers to appropriate marketing lists and to trigger Maison Élevée marketing emails.

How the Data Is Used

The application uses this data exclusively to:

1. Schedule and publish content from Maison Élevée's internal production pipeline to Maison Élevée's owned social media accounts.
2. Retrieve performance analytics for Maison Élevée's published content to inform brand content strategy.
3. Route Maison Élevée customer subscriptions to appropriate email marketing lists after a purchase.

Data the Application Does Not Access

The Maison Élevée Content Scheduler does not access, collect, store, or transmit:

• Data from any TikTok, Instagram, Facebook, or YouTube account other than those owned and authorized by Maison Élevée.
• Personal data, contact information, or browsing behavior of other TikTok, Instagram, Facebook, or YouTube users.
• Payment card data, banking details, or other sensitive financial information.
• Data on behalf of any third party.

Data Retention and Security

Data retrieved by the application is processed in memory for the purpose of the operation being performed and is retained only as required for ongoing brand operations. Authentication tokens and API credentials are stored as encrypted secrets in Cloudflare Workers infrastructure with restricted access. Maison Élevée does not sell, share, or distribute data accessed by the application to any third party.

Contact

For questions about the Maison Élevée Content Scheduler application or its data handling practices, contact: matt@maisonelevee.com

2. How We Use Information

We may use your information to:

• Provide and operate the Services and member portal
• Process payments, fulfill orders, and administer memberships
• Authenticate users and secure accounts
• Communicate transactional messages (receipts, renewal notices, policy updates)
• Send marketing communications (where permitted; you can opt out)
• Improve and personalize content and site performance
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms

3. Legal Bases (International Users)

If you are located outside the United States, we process personal data under one or more legal bases such as: contract necessity (providing Services), legitimate interests (security and improvements), consent (marketing/cookies where required), and legal compliance.

4. Cookies, Analytics, and Advertising

We use cookies and similar technologies for site functionality, analytics, and advertising.

Depending on your jurisdiction, you may be presented with cookie choices. You can also control cookies through browser settings; however, disabling cookies may affect functionality.

We may use analytics tools and advertising pixels (e.g., Google Analytics, Meta Pixel, TikTok Pixel) to understand usage and measure marketing performance.

5. How We Share Information

We may share information with:

• Service providers who help us operate (hosting, email via Klaviyo, analytics, customer support)
• Payment processors (Stripe) to process transactions
• Advertising/analytics partners (where enabled)
• Legal and compliance recipients if required (court orders, lawful requests)
• Business transfers in connection with a merger, acquisition, reorganization, or sale

We do not sell your personal information in the traditional sense. Some advertising activities may be considered "sharing" under certain privacy laws due to cross-site tracking.

6. Third-Party Links and Ateliers/Partners

The Services may link to third-party sites or facilitate contact with independent Ateliers/Partners. Their privacy practices are governed by their policies, not ours. We are not responsible for third-party data practices.

7. Data Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of data and legal requirements.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

9.1 Account Information

You may update your account information by logging into your account (if available) or contacting us.

9.2 Marketing Opt-Out

You can opt out of marketing emails by using the unsubscribe link or contacting us. Transactional messages may still be sent.

9.3 Cookies Controls

Use cookie banners (where provided) and browser settings to manage cookies.

9.4 Privacy Rights by Location

Depending on where you live (e.g., EU/UK, Canada, certain US states), you may have rights to access, delete, correct, or object to certain processing, and/or to limit sharing for targeted advertising. To exercise rights, contact: matt@maisonelevee.com. We may verify your identity before responding.

10. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect information from minors. If you believe a minor has provided data, contact us to request deletion.

11. International Transfers

If you access the Services from outside the United States, your information may be processed and stored in the United States or other jurisdictions where our service providers operate. By using the Services, you understand your information may be transferred to jurisdictions with different data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes are effective when posted with an updated "Last Updated" date.

13. Contact Us