Privacy Policy

Last updated: 14 May 2026

1. Who we are

MaisonFlow ("we", "us", "our") operates the website maisonflow.ch and the MaisonFlow mobile application. For the purposes of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), the data controller is MaisonFlow. Contact: privacy@maisonflow.ch.

2. What data we collect

When you join our waitlist we collect:

  • Email address — to contact you about early access.
  • Role (Boutique Manager or Sales Associate) — to understand demand by role type.
  • Submission timestamp — for waitlist ordering.

We do not collect names, payment details, or any sensitive personal data through this form. We do not use tracking cookies or third-party analytics on this page.

3. Legal basis for processing

We process your email address on the basis of your consent (Article 6(1)(a) GDPR), given when you submit the waitlist form. You may withdraw consent at any time by emailing us at privacy@maisonflow.ch and requesting removal.

4. How we use your data

  • To notify you when MaisonFlow early access opens.
  • To understand the composition of our waitlist (role distribution).

We will never sell, rent, or share your email with third parties for marketing purposes.

5. Data storage and security

Waitlist data is stored in Supabase (EU region). Supabase is SOC 2 Type II certified and stores data in ISO 27001-certified data centres. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is restricted to MaisonFlow personnel only.

6. Retention

We retain waitlist data until you request deletion or until 12 months after MaisonFlow launches publicly, whichever comes first. After this period, your data is permanently deleted.

7. Your rights

Under GDPR and nFADP you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your data at any time.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email privacy@maisonflow.ch. We will respond within 30 days. If you are unsatisfied, you may lodge a complaint with your national supervisory authority (e.g. the Federal Data Protection and Information Commissioner in Switzerland, or your local EU DPA).

8. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated to waitlist members by email. The "Last updated" date at the top reflects the most recent revision.