Privacy Policy

This Privacy Policy explains how Mainsail (“Mainsail,” “we,” “us,” or “our”) collects, uses, and protects the information you provide when you create an account, complete our intake, and use our done-for-you business-launch platform (the “Service”).

Our core promise: we do not sell your information, and we will not share the information you provide to us with any third party for their own purposes without your consent. We only share it with the trusted service providers that help us operate the Service, and only as described below.

Information we collect

Account information

When you sign up, we collect your name and email address. We use passwordless sign-in, so we send a one-time code to your email rather than storing a password.

Information you provide during intake

The heart of our Service is a detailed intake that becomes the single profile every deliverable is built from. Depending on what you choose to share, this can include:

• About you: your full and preferred name, contact details (email, phone), location, LinkedIn profile, a professional headshot, and the story, credentials, and motivations behind your work.
• Your business: business name, stage, legal/entity status, industry, what you do, the services you offer and their pricing, and how you deliver and charge.
• Your customers and market: your ideal clients, buyer types and industries, geography, the problems you solve, competitors, differentiation, and pricing position.
• Goals and finances: revenue goals, available capacity, budget, team, and how you define success.
• Voice, brand, and look & feel: tone preferences, writing samples, style and color direction, existing logos or brand assets, and reference material.
• Website, content, and logistics: domains you own or want, email provider, the contact details and social handles you want published, existing websites, testimonials, and your content preferences.
• Files you upload: such as a headshot or logo file.

You control how much you share. Some fields are required to generate quality work; many are optional.

Payment information

When you purchase a package, payment is handled by our payment processor. We receive confirmation of your payment and limited billing details, but we do not collect or store your full card number.

Information collected automatically

Like most online services, we automatically collect certain technical and usage information when you use the Service, such as your IP address, device and browser type, pages viewed, and interactions with features. We use this to keep the Service secure, diagnose problems, and understand how the product is used.

How we use your information

• To create, review, and deliver the artifacts and modules you’ve engaged us to produce.
• To operate, maintain, secure, and improve the Service.
• To communicate with you about your account, your project, and support requests.
• To process payments and prevent fraud and abuse.
• To understand product usage and diagnose errors so we can make the Service better.
• To comply with legal obligations and enforce our terms.

How we share information

We do not sell your personal information, and we do not share the information you provide with third parties for their own marketing or other independent purposes. We share information only in these limited circumstances:

• Service providers who work on our behalf. We use a small set of trusted vendors to run the Service. They may process your information only to provide services to us and are bound by confidentiality and data-protection obligations. These include:
  • Cloudflare — hosting, content delivery, file storage, security, and website analytics.
  • PostHog — product analytics to understand how the Service is used.
  • Sentry — error and crash reporting so we can find and fix bugs.
  • Google Analytics — website and usage analytics.
  • OpenRouter and the AI model providers it routes to — to generate your deliverables from your profile, configured for zero data retention and no training (see “AI processing” below).
  • Our email delivery provider — to send sign-in codes and account and project communications.
  • Our payment processor — to take payment for packages.
  • Adobe Fonts (Typekit) — to serve the fonts used across the platform.
• With your consent or at your direction. For example, when a deliverable is published on your behalf, or when you ask us to connect a service to your project.
• Legal and safety. When required by law, to respond to lawful requests, or to protect the rights, property, or safety of Mainsail, our clients, or others.
• Business transfers. If Mainsail is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will continue to protect it under this policy.

AI processing

We use AI models (accessed through OpenRouter) to help generate your deliverables from the profile you create during intake. This means the information you provide may be sent to these model providers to produce your results. We configure these providers for zero data retention and no training: your information is used only to generate your output in the moment, is not retained by the provider afterward, and is not used to train their models. AI-generated content is always reviewed by a human on our team before it reaches you, and you should treat generated content as a starting point that you review for accuracy.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used through the analytics providers listed above. You can control cookies through your browser settings, though some features may not work correctly without them.

Data retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it.

How we protect your information

Mainsail is built to be secure by design. We use encryption in transit, access controls, and audit logging for sensitive actions, and we restrict access to your information to people who need it to do their work. No method of transmission or storage is completely secure, but we work hard to protect your data.

Your choices and rights

You can review and update much of your information from within your account, and you can ask us to access, correct, or delete your personal information. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To make a request, contact us using the details below. We will not discriminate against you for exercising these rights.

International transfers

We and our service providers may process and store your information in countries other than your own. Where we transfer information internationally, we take steps to ensure it remains protected in line with this policy.

Children

The Service is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at [email protected].