Who handles your data
Max & Mia is a product of Atlas Innovation Ventures Ltd. Atlas handles information needed to run the website, manage business accounts, process billing and support users. For those activities, Atlas decides how the information is used.
When a customer calls a tradesperson using Max & Mia, that business normally decides why it needs the enquiry and what to do with it. Atlas handles call information to provide the service for that business. The business should give its customers its own privacy information; contact the business first about how it uses your enquiry.
Information we handle
- Business name, trade, service area, greeting, hours and call-handling instructions.
- Account identity, contact and verified phone details, settings and sign-in records.
- Subscription status, plan and payment references; payment card details stay with the payment provider.
- Caller phone details, what callers say, job-card fields, owner notes and follow-up decisions.
- Call and recording status, retained audio and transcripts when the approved notice applies.
- Support messages, website requests and limited service/security logs.
Please do not send card numbers, passwords or unnecessary sensitive information through calls, job-card notes or support messages.
Calls, AI and recording
Max & Mia uses voice and transcription services to answer work calls using the business's published instructions and to prepare a job card for the owner to review. AI can mishear or summarise a caller incorrectly. The business owner makes decisions about the enquiry; Max & Mia does not confirm a price, booking or attendance on its own.
Where operational recording is enabled, callers hear a recording notice before audio or transcript is kept. Recording supports call review and resolving disputes. It does not permit using callers' recordings or transcripts for product training, marketing or profiling. Those other uses would need a separate decision and permission.
Purposes and lawful bases
Atlas uses business account and billing information to provide the service or take steps before a contract. Security, fraud prevention, support and audit records serve legitimate interests or legal duties as applicable. The tradesperson is responsible for its lawful basis for handling caller enquiries. Operational call recording uses a documented legitimate-interests assessment and the approved notice, not assumed verbal consent.
Providers and locations
Providing the service involves Firebase for account sign-in, Twilio for calls and phone verification, Microsoft Azure and Foundry for hosting and voice processing, Stripe for billing, and Cloudflare for the website. Providers may handle information in different countries under their own processing arrangements. Contact us for details of relevant transfers and safeguards; do not assume every call or provider stays within the UK.
Website analytics and storage
When configured, our website uses PostHog to record selected interactions and diagnostic errors. Automatic page-view capture and session recording are disabled. The analytics provider may use browser storage and receive device, browser and request details. Your browser settings can restrict or remove stored data; contact us to object to analytics that rely on legitimate interests. The app also keeps sign-in state on your device so you can use your account.
Retention and deletion
Operational audio is scheduled for deletion after 30 days and retained transcript content after 90 days. Notice and lawful-basis evidence is kept for one year. Job cards, account, billing and audit records have different periods tied to their purpose and any legal duty. Provider copies and backups may take additional time to clear under their deletion cycles.
Business owners can request account deletion in the app or follow the steps on our account-deletion page. Account deletion removes access; customer-call records may remain for the applicable retention period. Requests concerning a particular customer enquiry should go to the business first.
Your rights
UK data-protection law may give you rights to access, correct, erase, restrict or receive your information, and to object to certain processing. These rights depend on the circumstances and may have legal exceptions. We may need to verify identity before responding. You can object to direct marketing at any time.
You can object to processing based on legitimate interests, including operational call recording. Tell the business you called, or contact us for help directing your request.
You can also complain to the UK Information Commissioner's Office.
Security and changes
Product access is tied to business membership. Call artifacts are stored privately and available to authorised owners through the app; provider and account access is limited by role. We may change this notice as the service or legal requirements change. The update date above will change when the published text changes.
Contact
For a question about Atlas's handling of your data, use the Atlas contact form and write Max & Mia privacy in the message. Do not include call recordings, transcripts or other people's details in the form. For help with account access, visit support.