Privacy policy

String Maven, LLC

String Maven, LLC (“String Maven,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use:

• our marketing website at stringmaven.com;
• our web application at app.stringmaven.com (including when installed as a progressive web app);
• related features such as Find a Stringer on our marketing site (collectively, the “Services”).

This Policy applies to stringers and other business users who create accounts, and to visitors who use public features (such as submitting a Find a Stringer inquiry). It does not apply to third-party websites we do not control.

By using the Services, you agree to this Policy. If you do not agree, do not use the Services.

1. Information we collect

A. Information you provide

Account and profile (stringers)
When you register or update your profile, we may collect:

• email address and authentication credentials (managed through our auth provider);
• name and business-related profile fields;
• preferences (for example, tension/length units, default stringing options);
• optional invoicing settings if you enable that feature (for example, business name on invoices, payment instructions, default restring fee, next invoice number, and optional tax settings);
• optional Find a Stringer details if you opt in (for example, business display name, city/region/country, and map coordinates).

Customer and job data (entered by you)
To use the Services, you may enter information about your customers and jobs, such as:

• customer name, email, and phone;
• racquet brand/model, stringing specifications, tensions, notes, and job status;
• records of whether a pickup notification was sent;
• if you use invoicing, invoice line items, amounts (subtotal, tax if applicable, total), currency, invoice number, and a snapshot of invoice and shop details stored on the job when you send (so records stay accurate even if you later change settings).

You control what you enter. You are responsible for having a lawful basis to collect and use your customers’ information.

Communications
If you contact us (for example, feedback or support), we collect the information you submit.

Find a Stringer inquiries (visitors)
If a visitor contacts you through Find a Stringer on our marketing site, we may collect:

• visitor name, email, optional phone, and message;
• which stringer the inquiry was sent to;
• technical metadata (for example, timestamp, source).

B. Information collected automatically

When you use the Services, we and our service providers may automatically collect:

• IP address and general location derived from IP;
• device and browser type, operating system, and language;
• pages viewed, features used, timestamps, and referring URLs;
• cookies and similar technologies (see Section 8).

We use this information for security, troubleshooting, analytics, and to improve the Services.

C. Information we do not collect

We do not intentionally collect:

• payment card numbers or process payments on your behalf through the Services (we are not a payment processor; customers pay you using methods you describe, such as bank transfer, Venmo, or cash);
• information from social media platforms for profiling;
• sensitive categories of data (such as health or biometric data) unless you voluntarily include them in free-text fields.

Invoice emails may include amounts owed and payment instructions you provide (which could contain account identifiers, phone numbers, or similar). You choose what to include in those fields.

2. How we use information

Your customers’ information — who is in control

In plain terms:

• You control the customer and job information you enter in the App (names, contact details, stringing history, notes, and similar business records).
• String Maven hosts and processes that information on your behalf so we can run the Services for you (for example, storing jobs, sending pickup or invoice emails when you ask us to, and showing your data back to you when you sign in).
• You are responsible for having permission to collect and use your customers’ information — for example, because they are your customers, they gave consent, or another lawful basis applies in your situation.

If you are a club, pro shop, or organization, you are also responsible for how your staff and authorized users access customer data through your account.

We use personal information to:

• create and manage accounts and authenticate users;
• provide core features (customers, string jobs, racquet catalog, invoicing where enabled, insights, and related tools);
• send transactional emails on your behalf (for example, racquet ready for pickup, and invoices with amounts and payment instructions you configure) and service-related emails to you (for example, new account notifications, Find a Stringer lead alerts);
• operate Find a Stringer (public listings and inquiry delivery to opted-in stringers);
• maintain security, prevent abuse, and enforce our Terms;
• analyze usage and improve reliability and user experience;
• comply with law and respond to lawful requests.

We do not sell your personal information. We do not use your customer lists for our own marketing to your customers.

3. Legal bases (EEA/UK users)

Where applicable (for example, GDPR), we rely on:

• Contract — to provide the Services you request;
• Legitimate interests — to secure, improve, and operate the Services (balanced against your rights);
• Consent — where required (for example, optional map listing or non-essential cookies where applicable);
• Legal obligation — where we must retain or disclose information by law.

Stringers, clubs, and shops who enter customer data typically decide why and how that data is used for their own business purposes and act as controllers (or equivalent under local law) for that data. String Maven acts as a processor (or service provider) for that customer data — we handle it only to provide the Services to you, as described in this Policy and our Terms of Use.

4. How we share information

We share personal information only as described below:

Service providers
We use trusted vendors who process data on our behalf, including:

These providers are authorized to use personal information only as needed to perform services for us.

Other stringers / the public (Find a Stringer)
If you opt in, limited business and location information you choose may be displayed publicly on our marketing site. Visitor inquiries are shared with the stringer selected by the visitor.

Legal and safety
We may disclose information if we believe in good faith that disclosure is required by law, court order, or government request, or to protect rights, safety, and security.

Business transfers
If we are involved in a merger, acquisition, or asset sale, personal information may transfer as part of that transaction, subject to continued protection consistent with this Policy.

We do not share personal information with third parties for their independent marketing purposes.

5. Email and messaging

Pickup and service emails. When you mark a job complete and choose to notify a customer, we send email using our email provider. The message is initiated by you; replies may be directed to your email address as configured in the product.

Invoice emails. If you enable invoicing and choose to send an invoice (alone or together with a pickup message), we send email to the customer’s address on the job. The email includes line items, totals, optional tax lines, your business name, and payment instructions you entered in settings (for example, bank details, Venmo, or how to pay on pickup). We store a snapshot of that invoice on the job (and may also store a copy in an invoices log) for your records. We do not collect or settle payments; your customer pays you directly using the methods you describe.

Find a Stringer. Visitors who submit an inquiry may trigger an email to the selected stringer with inquiry details.

Administrative emails. We may send account-related or security-related messages. We do not send bulk promotional newsletters unless you separately opt in (if we offer that in the future).

Other channels. SMS, messaging apps (for example, WhatsApp), or other delivery methods may be offered in the future. If added, they will be described in an updated Policy and will remain user-initiated where applicable.

You are responsible for ensuring your use of email and messaging features complies with applicable law (including rules for commercial or transactional messages, where applicable). Invoice and pickup messages are intended to be transactional communications about a stringing job, not unsolicited marketing from String Maven.

6. Data retention and backups

We retain personal information for as long as your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and comply with legal obligations.

Invoice snapshots and related job or invoice records may be retained while your account is active so you can view past invoices and business history, even after an invoice is sent.

When you delete content or close an account, we delete or anonymize information within a reasonable period, except where we must retain copies for legal compliance or legitimate business purposes (such as fraud prevention).

Backups. We maintain periodic backups for security, disaster recovery, and operational continuity. If you delete information or close your account, deleted data may remain in backup systems for a limited period before those backups are rotated out or purged according to our retention schedules. Backup copies are not used to restore deleted data on request except where we are required to do so by law.

Aggregated or de-identified data that cannot reasonably identify you may be retained longer.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• Encryption in transit — connections to the Services use HTTPS/TLS;
• Reputable cloud infrastructure — application data is stored using established cloud providers (for example, Supabase for database and authentication, and Vercel for hosting), which maintain their own security programs;
• Access controls — limiting access to systems and data to personnel and contractors who need it to operate the Services;
• Provider due diligence — selecting subprocessors that help us deliver the Services securely.

No internet-based service can guarantee absolute security. We cannot promise that unauthorized access, disclosure, alteration, or loss will never occur. You are responsible for safeguarding your login credentials and devices used to access the Services.

If you believe your account has been compromised, contact us promptly at info@stringmaven.com.

8. Cookies and analytics

We use cookies and similar technologies for:

• authentication and session management (keeping you signed in);
• security (protecting accounts and detecting abuse);
• analytics (understanding how the Services are used).

You can control cookies through your browser settings. Disabling certain cookies may limit functionality.

Where required by law, we will obtain consent before non-essential cookies.

Analytics tools may include Google Analytics and Vercel Analytics. These tools collect usage data as described in their respective policies.

We do not respond to “Do Not Track” browser signals in a uniform way across all browsers; we limit tracking to what is described in this Policy.

9. Your choices and rights

Depending on where you live, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• delete certain information;
• export or receive a copy of your data;
• object to or restrict certain processing;
• withdraw consent where processing is consent-based.

Account holders: You can update much of your profile information in the App under More → Profile. For other requests, contact us (Section 14).

Customers of stringers: If you are a racquet customer of a stringer who uses String Maven, contact that stringer first. We generally cannot access or delete your data without the stringer’s account context.

We will verify requests before responding. We may decline requests where an exception applies (for example, legal retention requirements).

California and U.S. state privacy rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as defined under applicable U.S. state privacy laws.

California residents may have additional rights under the CCPA/CPRA. Submit requests using the contact method in Section 14. We will not discriminate against you for exercising privacy rights.

EEA/UK residents

You may lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to resolve your concern.

10. Children’s privacy

The Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. International transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be processed in the U.S. and other countries where our providers operate. We use appropriate safeguards where required by law for international transfers.

12. Third-party links

Our marketing site and App may link to third-party sites. We are not responsible for their privacy practices. Review their policies before providing personal information.

13. Changes to this Policy

We may update this Policy from time to time. We will post the revised version at stringmaven.com/privacy-policy with an updated “Last updated” date. Material changes may be communicated through the Services or by email where appropriate.

Continued use after the effective date constitutes acceptance of the updated Policy, except where applicable law requires otherwise.

14. Contact us

String Maven, LLC
Email: info@stringmaven.com
Website: https://stringmaven.com

For privacy requests (access, deletion, correction), email info@stringmaven.com with the subject line Privacy Request and enough information for us to verify your account or relationship to the data.

If you use a data subject request form on our website, you may submit requests there as well.

15. Summary for stringers (quick reference)