Privacy Policy

[LEGAL ENTITY NAME AND REGISTERED ADDRESS — TO BE FILLED IN] ("Maravera", "we") operates maravera.com and the accompanying app. For any privacy questions, reach us at contact@maravera.com.

When you submit the early-access form on this site, we collect: your venue's name, your name, your email address, your city, and a rough count of cocktails on your menu — plus, if you provide them, a phone number and a message. Every field except phone and message is required, since we can't reply without them.

The server briefly logs the sender's IP address to prevent automated spam (a simple per-minute submission limit) — that address is held only in server memory and is never written to a database.

For venues that join Maravera, there is currently no public sign-up — accounts for owners and staff are created by hand by our team, following a conversation after your early-access request. For those accounts we store the person's name, email, and role (e.g. owner or collaborator) so they can log in to the dashboard.

We use early-access form data only to reply to you and, if we agree to work together, set up your venue in the system. We don't send a newsletter or marketing emails from this form — there is currently no automated confirmation-email system anywhere in the app either; we read and reply to messages ourselves.

We don't sell your data or share it with third parties for marketing purposes.

This site currently uses no Google Analytics, Meta/Facebook pixel, or any other visitor-tracking tool — there is no such integration anywhere in the codebase. That's also why there's no cookie-consent banner: we have no non-essential cookies on this site that would require one. If we add tracking in the future, this policy and the site will be updated before it's switched on.

Signed-in dashboard users (app.maravera.com) receive a session cookie set by Supabase, our authentication provider — necessary to keep you logged in, not used to track you elsewhere. Maravera staff who temporarily access your account for support (e.g. while setting up your venue) use a separate, signed cookie on admin.maravera.com, available only to our internal team.

We host the site and app on Vercel. We run our database and authentication through Supabase. Both act as our data processors — they process data on our behalf, under their own security and privacy policies, and do not use it for their own purposes.

We keep early-access submissions until we agree to work with your venue (at which point they become part of your account data) or until you ask us to delete them. We keep account data for as long as your venue is active on Maravera, plus a reasonable period afterward for records and any outstanding obligations.

You can ask to see the data we hold about you, correct it, or have it deleted — email contact@maravera.com and we'll reply personally, usually within a few days. If you believe we've handled your data in breach of applicable law, you have the right to lodge a complaint with your national data protection authority.

We take reasonable technical measures (encrypted connections, database-level access controls) to protect your data — but we're a small, early-stage product, not an enterprise system, so we can't guarantee absolute security. If you spot a security issue, please tell us right away at contact@maravera.com.

If how we handle data changes — for example, if we add an analytics tool — we'll update this page and the date at the top. There's no separate email notification system, since none exists yet for any other purpose in the app.

For any question about this policy: contact@maravera.com.