Privacy Policy

1. Who this covers

Maitaki is a product of Curalux, LLC ("Maitaki", "we"). This policy applies to the maitaki.app website and the Maitaki web and mobile apps. It does not cover anything a vendor, accountant or other third party does with data you give them separately.

If you are a member of staff at a restaurant that uses Maitaki, your employer decides what goes into the account and who can see it. Ask them first; we will help them help you.

2. What we hold

What you send us

• Invoices, dockets, credit notes and statements — including vendor names, line items, pack sizes, catch weights, prices and dates.
• Recipes — ingredients, quantities, yields, method notes, and anything else written on the card you photograph.
• Order guides and vendor price lists.
• Sales and POS figures, where you connect or upload them.
• The photographs themselves, as taken. A photo of an invoice on a prep bench may catch more than the invoice; we store the image you sent.

Your team

Names, email addresses and roles for the people you invite, and a record of what each of them did in the account — who photographed which delivery, who requested which credit. You control who is on the account and you can remove them at any time.

Account and usage

Contact and billing details, the locations on your account, device and log data needed to run and secure the service, and support conversations with us.

3. Your content stays yours

4. What we use it for

• Reading your documents and turning them into ingredients, recipes and costs.
• Keeping every plate costed as prices move, and alerting you when they do.
• Answering your questions about your own numbers.
• Comparing what you pay against your own history and against prices you have been quoted.
• Billing you, supporting you, and keeping the service secure and working.

We do not sell your data. We do not share it with your vendors. We do not use it to advertise to you.

5. AI, and what it does with your documents

Reading a photographed invoice and answering a question about your costs both involve automated processing, carried out by Anthropic's Claude models. Your content is sent to Anthropic to produce your result and for no other purpose, under commercial terms that do not permit training on it.

Your content is not used to train shared or public models — not ours, not theirs. Where a provider's default terms would permit training, we contract out of it.

Automated reading is not perfect. It can misread a figure, a unit or a vendor name. Nothing it produces is a substitute for your own judgement — see the accuracy clause in our Terms.

6. When a person at Maitaki sees your data

A human on our side reads your content in two situations, and no others:

• You ask us to. Support runs on chat; if you send us an invoice that scanned badly, we look at it.
• Something is broken. Diagnosing a fault, kept to what the fault requires.

Access is limited to staff who need it, and it is logged.

7. Who else touches it

We use a small number of processors, each bound to use your data only to provide their service to us:

• Anthropic (Claude) — reads your documents and answers your questions.
• Vercel — serves the website and application.
• Supabase — database and file storage.
• Stripe — subscription billing and card handling.

Card details go to Stripe, not to us; we never hold your full card number. All four run in the United States.

We will also disclose data if the law genuinely requires it, and if Maitaki is ever acquired, your account moves with the business under this same policy. We will tell you before that happens.

8. Regional price benchmarks

Today, every comparison you see is built from your own data — your invoice history, your order guides, and quotes you have entered. Nothing you send us is pooled with another restaurant's.

We intend to change that in one specific way: to show you how the price you pay for an ingredient compares with the regional average. That is only useful if it is built from real invoices, so it would be built from customer invoices — including yours. Before we turn it on:

• Figures will be aggregated and de-identified. A benchmark is an average, never a line from someone's invoice.
• A region and item will only produce a benchmark once enough separate restaurants contribute that no individual's price can be worked backwards from it.
• No restaurant is ever named, and no restaurant sees another's prices, volumes or vendors.
• Your recipes are excluded entirely — they are never pooled, aggregated or benchmarked, in any form.
• We will tell you before it starts, and you will be able to opt your data out while still seeing the benchmarks.

We would rather set this out now, while it is still a plan, than add it quietly later.

9. Your team's personal data

For your staff's details, you are the controller and we are the processor: you decide who is on the account and why, and we act on your instructions. If one of your team asks us directly to see or delete their data, we will point them to you and help you action it.

10. How long we keep it, and getting it back

While your account is open, we keep your content so your history stays intact — a price trend is only useful with the past in it.

If you cancel, you have 60 days to export your recipes, ingredients, vendors and cost history. After that we delete your content — we do not keep it against a return, so export before the window closes. The exceptions are records we are legally required to retain, such as billing records for tax purposes. Backups age out on their own cycle.

You can ask us to delete your account sooner at any time.

11. Security

Data is encrypted in transit and at rest. Access on our side is limited to the staff who need it and is logged. No system is perfect, and we would rather say so than imply otherwise; if a breach affects you, we will tell you promptly and plainly.

12. Your rights

Maitaki currently serves customers in the United States. Wherever you are, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use. Email support@maitaki.ai and we will respond within 45 days.

Several states — California, Colorado, Connecticut, Texas, Virginia and others — give residents specific rights over their personal information. We extend those rights to every customer rather than checking your address first, and we will not charge you or degrade your service for exercising them.

We do not sell personal information, and we do not share it for cross-context behavioural advertising — as those terms are defined under California law. We have never done either.

13. Children

Maitaki is a tool for running a business and is not directed at children. Do not create an account for anyone under 16.

14. Changes

If we change this policy in a way that matters, we will email account owners before it takes effect rather than quietly reposting the page.

15. Contact

support@maitaki.ai reaches a person.

Curalux, LLC
440 N Barranca Ave #9461, Covina, CA 91723