Privacy Policy

Maxopoli ("we", "us", "our") operates Mise and is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

We collect the following types of information:

Account Information

• Your name and email address when you register
• Your restaurant name
• Password (stored encrypted, we never see your plain-text password)

Business Data You Import

• Covers and service history
• Staff profiles and role information
• Menu items, ingredients, and pricing
• Venue details and operating hours

Usage Data

• Number of forecasts generated
• Pages visited and features used
• Date and time of logins

Payment Information

• Credit pack purchases and transaction history
• Your Stripe customer ID
• We do not store your card number, expiry date, or CVC, all card data is handled exclusively by Stripe

We use your information solely to provide and improve the Service:

• To generate SI-powered service forecasts using your restaurant data
• To manage your account and credit balance
• To process payments through Stripe
• To send transactional emails such as payment confirmations
• To monitor platform health and fix technical issues
• To improve the accuracy and quality of our SI forecasting

We do not sell your personal information or business data to any third party. We share information only in the following limited circumstances:

• Anthropic: Your restaurant data is sent to Anthropic's Claude API to generate forecasts. Anthropic processes this data under their own privacy policy and does not use your data to train their models.
• Stripe: Payment information is shared with Stripe to process transactions. Stripe is PCI-DSS compliant and handles all card data securely.
• Supabase: Your data is stored on Supabase's secure, encrypted database infrastructure. Supabase stores Mise's data in the United States, under the safeguards named in Supabase's data processing terms (the European Commission's standard contractual clauses or the EU-US Data Privacy Framework).
• Vercel: Vercel hosts Mise, so every page you open passes through its servers. It also counts visits, without cookies. Vercel is in the United States and works under the EU-US Data Privacy Framework.
• Legal requirements: We may disclose information if required by law or to protect our legal rights.

Your data is stored on secure, encrypted servers provided by Supabase. We implement industry-standard security measures including encrypted connections (HTTPS), encrypted data at rest, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

We retain your account data and business imports for as long as your account is active. If you close your account we will delete your personal information within 30 days, except where retention is required by law. Anonymised usage statistics may be retained indefinitely.

As a Canadian resident you have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct inaccurate information
• Withdrawal of consent: You may withdraw consent to our use of your data, which will result in account closure
• Deletion: You may request deletion of your account and associated data

To exercise any of these rights, contact us at support@agenticmise.com.

Mise uses essential cookies to maintain your login session. We do not use advertising or tracking cookies. Mise counts page visits itself, with no cookies and nothing stored on your device: the page, the site you came from, the type of device and browser, and the language. These counts cannot single you out. Vercel, which hosts Mise, also counts visits, without third-party cookies.

Usage tracking on this site

1. What we record, only with your consent: pages visited, time of visit, the site you came from, the page as it appeared to you, scroll depth, mouse movement, taps and clicks, window size, device type, and any campaign tag in the link you followed. Text typed into forms is never recorded, and on pages where you are signed in every word is hidden.
2. Why: to see how the site is used and to improve it. The admin pages show views and visits drawn from this data.
3. Legal basis: your consent, art. 6(1)(a) GDPR and art. 122 of the Italian Privacy Code.
4. Who sees it: only Maxopoli. The data is stored with Supabase, which processes it on our behalf under art. 28 GDPR. It is never sold and never used for advertising.
5. How long: 180 days, then deleted.
6. Your choice at any time: the "Privacy choices" link at the foot of every page lets you withdraw as easily as you gave consent. Withdrawal stops the tracking from that moment.
7. Your rights: access, correction, deletion, restriction, objection and portability (arts 15 to 22 GDPR), by writing to support@agenticmise.com. You may also complain to the Garante per la protezione dei dati personali, www.garanteprivacy.it.
8. Controller: Maxopoli, Ontario, Canada, support@agenticmise.com.

Your choice is kept in your browser with its date, so the banner remembers it. After a no, it asks again no sooner than six months later.

The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Your continued use of Mise after changes take effect constitutes your acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact our Privacy Officer at:

You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you believe your privacy rights have been violated.