MasterApp Suite AI Privacy Policy

Effective Date: August 19, 2026

MasterApp Suite AI, LLC ("MasterApp," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit masterappai.com, use app.axcobar.com or related MasterApp services (collectively, the "Service"), communicate with us, or otherwise interact with us. MasterApp Suite AI, LLC is formed in Maryland (Maryland Department ID W27131523) and is based in Rockville, Maryland 20855, USA.

For account, website, billing, and direct relationship information, we generally act as controller/business. For personal information in a customer's jobs, invoices, contacts, employee records, photos, or other Customer Data, we generally act as processor/service provider on that customer's instructions. If you are a customer or employee of a MasterApp business customer, direct privacy requests first to that business.

1. Personal Information We Collect

We collect personal information from you directly, automatically, from our customers, and from service providers and integrations. The categories may include the following.

Account and Contact Information

When you create an account, request a demonstration, start a trial, contact us, or use the Service, we may collect your name, business name, job title, email address, phone number, mailing address, login credentials, account preferences, and communications with us. We may also collect information about your business, such as business type, service area, team size, operating details, and plan selection.

Customer Data Processed for Our Business Customers

Our customers may use the Service to store or manage information about their own customers, prospects, employees, contractors, and jobs. This Customer Data can include names, phone numbers, email and postal addresses, photos, job details, service history, estimates, quotes, invoices, payment-status information, schedules, communications, GPS-related tracking data, payroll-related workflow information, and other records entered into the Service. Our customers control this data and are responsible for notices, consents, and legal bases required for their collection and use.

Payment and Transaction Information

Subscription payments are processed by Stripe. We do not store full payment card numbers or card security codes. We may receive limited transaction information from Stripe, such as payment status, amount, billing contact details, payment method type, and identifiers needed to manage the subscription, prevent fraud, or provide support. Stripe's processing is governed by its own privacy terms and policies.

Device, Usage, and Log Information

When you use the Service or our website, we may automatically collect device and usage information. This may include IP address, browser type and settings, operating system, device identifiers, pages or screens viewed, feature interactions, referring URLs, dates and times of access, diagnostic data, crash reports, and security logs. We use this information to operate, secure, troubleshoot, and improve the Service.

Location Information

Certain Service features may process location information, including GPS data related to employees, vehicles, or field work, if a customer enables those features and grants the necessary device permissions. Location information can be sensitive. Customers that enable tracking are responsible for providing legally required notice, obtaining consent where required, configuring tracking lawfully, and limiting access to authorized personnel. We process this information to provide the enabled feature and do not use it for third-party advertising.

Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies on the Service and website. These may collect device, browser, usage, and preference information. See the Cookies section below for more detail.

Information from Integrations and Other Sources

If you connect a third-party service, such as Jobber, Calendly, Stripe, Twilio, SendGrid, or Wisetack, we may receive information the integration sends to us as authorized by you or your organization. This can include account identifiers, contact records, calendar data, job or quote information, message status, financing-related workflow status, and payment status. We may also receive information from service providers that help us prevent fraud, perform analytics, or maintain the Service.

2. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• to provide, administer, authenticate, maintain, and support the Service and your account;
• to process subscriptions, manage trials, send billing notices, and prevent payment fraud;
• to create and manage quotes, invoices, jobs, communications, schedules, workflows, reports, and other features you or your organization choose to use;
• to operate AI-assisted functionality based on your instructions, while you remain responsible for reviewing outputs before use;
• to send transactional communications, including service announcements, verification messages, receipts, security alerts, support responses, and notices about material changes;
• to send marketing communications about MasterApp, offers, or features where permitted by law; you can opt out of marketing emails using the unsubscribe link or by contacting us, while transactional messages may still be sent;
• to analyze usage, improve features, develop and test product capabilities, monitor performance, and understand aggregate trends;
• to secure the Service, detect, investigate, and prevent fraud, abuse, spam, security incidents, and violations of our Terms;
• to comply with applicable legal obligations, enforce our agreements, protect rights and safety, and respond to lawful requests; and
• to create de-identified or aggregated information that does not reasonably identify you, which we may use and disclose as permitted by law.

If we process personal data subject to the GDPR, we rely on one or more lawful bases: performance of a contract with you; our legitimate interests in operating, improving, securing, and marketing the Service where those interests are not overridden by your rights; your consent where required; and compliance with legal obligations. Where we process Customer Data on behalf of a customer, that customer is generally responsible for identifying the appropriate lawful basis and providing documented instructions.

3. How We Disclose Personal Information

We do not sell personal information to third parties for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising. We do not use third-party advertising cookies on the Service. We may disclose personal information as follows:

• Service providers and subprocessors. We use providers that help deliver the Service, including Stripe for payments, Twilio for SMS and certain communications, SendGrid for email delivery, hosting and infrastructure providers such as Azure and/or AWS, security and support vendors, and analytics providers. They may process personal information only as needed to provide services to us and subject to appropriate contractual obligations.
• Customer-selected integrations. If you connect an integration, we disclose and receive information as necessary to operate it. This may include Jobber for quotes or job-related integrations, Calendly for scheduling, and Wisetack for financing workflows. These services are independent businesses with their own privacy practices and terms.
• Communications and mobile carriers. Messages sent through SMS, WhatsApp, email, or other communications channels may be transmitted through the relevant provider, carrier, or platform. Delivery is subject to their systems and policies.
• Your organization and authorized users. Account administrators and other authorized users may access information within their assigned permissions. A business customer may access Customer Data entered by its employees or contractors.
• Corporate transactions. We may disclose information in connection with a merger, financing, acquisition, reorganization, sale of all or part of our business, bankruptcy, or similar transaction, subject to applicable law.
• Legal and safety purposes. We may disclose information if we reasonably believe disclosure is necessary to comply with law, legal process, or a government request; enforce our agreements; protect the security or integrity of the Service; investigate suspected wrongdoing; or protect the rights, property, or safety of MasterApp, our users, or others.
• With your direction or consent. We may disclose information when you direct us to do so or otherwise provide consent.

We do not permit our service providers to use Customer Data for their own independent marketing or advertising purposes. We may disclose de-identified or aggregated information that does not reasonably identify an individual.

4. Cookies and Analytics

We use essential cookies that are necessary for sign-in, security, preferences, load balancing, and core website or application functionality. You cannot disable essential cookies through our site without affecting the Service.

We may also use analytics cookies or similar tools to understand how visitors and users interact with our website and Service, such as which pages are used, feature performance, and general traffic patterns. We use these insights to improve usability, reliability, and content. We do not use third-party advertising cookies or permit third parties to use our Service data for targeted advertising across unrelated websites.

Most browsers allow you to remove or block cookies through browser settings. Blocking cookies may prevent parts of the Service from functioning properly. Where required by applicable law, we will ask for consent before placing non-essential cookies. Your choice will not affect essential cookies or necessary service communications.

5. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, satisfying legal, accounting, tax, dispute-resolution, security, and recordkeeping obligations. Account and Customer Data are generally retained while the relevant customer account is active and for up to 30 days after cancellation or termination to allow export, reactivation, or orderly deletion, unless a longer period is required or permitted by law or agreement.

Residual copies may remain in backups for up to 90 days after deletion from active systems, after which they are overwritten or deleted in the ordinary backup cycle. We may retain limited information longer where necessary for legal obligations, fraud prevention, enforcement of our agreements, or defense of legal claims. When we process Customer Data for a business customer, the customer's instructions and applicable agreement may control deletion and return of that data.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures include encryption in transit using TLS, encryption at rest where appropriate, access controls and least-privilege practices, authentication controls, system monitoring, audit logs, backups, and security-focused operational procedures. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security. You are responsible for using strong credentials, managing account permissions, protecting devices, and promptly reporting suspected unauthorized access to support@masterappai.com.

7. International Data Transfers

MasterApp is based in the United States, and the Service is hosted and operated in the United States. Personal information may be collected, stored, processed, and accessed in the United States and other locations where we or our service providers operate. These locations may have data-protection laws that differ from those in your jurisdiction.

For transfers of personal data from the European Economic Area, United Kingdom, or Switzerland where required, we will use an appropriate transfer mechanism, such as applicable Standard Contractual Clauses or another lawful transfer mechanism, and reasonable supplementary safeguards. Contact privacy@masterappai.com to request more information about applicable transfer safeguards.

8. GDPR and EEA/UK/Swiss Privacy Rights

If you are in the EEA, UK, or Switzerland and MasterApp acts as controller for your personal data, you may have the right, subject to applicable limitations, to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing in certain circumstances;
• receive portable personal data in a structured, commonly used, machine-readable format where applicable;
• object to processing based on our legitimate interests, including direct marketing; and
• withdraw consent at any time where processing is based on consent, without affecting processing before withdrawal.

To exercise a right, email privacy@masterappai.com. We may need to verify your identity and may ask for information necessary to process your request. We aim to respond within one month, subject to lawful extensions where requests are complex or numerous. You also have the right to lodge a complaint with your local data protection authority. If MasterApp processes your information only on behalf of a business customer, we will direct your request to that customer or assist it as required by our agreement.

9. California Privacy Notice (CCPA/CPRA)

This section applies to California residents. In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as name, email, phone, IP address, and account identifiers); customer records and business information; internet or network activity; approximate location derived from IP and, if enabled by a customer, precise GPS location; professional or employment-related information entered by a customer; and other Customer Data such as photos, job, quote, invoice, and communication records. We collect these categories from you, our customers, authorized users, devices, integrations, and service providers for the purposes stated in this Policy.

We disclose the categories described above to service providers, integrations you choose, your organization and authorized users, and parties described in the "How We Disclose" section. We do not sell personal information and do not share personal information for cross-context behavioral advertising. Accordingly, there is no sale or sharing from which to opt out under California law. We do not knowingly sell or share personal information of consumers under 16 years of age.

Subject to applicable exceptions, California residents may request to know/access the personal information we collected, used, or disclosed; request deletion; request correction of inaccurate personal information; and receive equal service and price even if they exercise privacy rights. You may submit a request by emailing privacy@masterappai.com. We will verify the request using information reasonably necessary to confirm your identity. You may authorize an agent to make a request, but we may require proof of authorization and identity verification. We endeavor to acknowledge requests within 10 business days and respond within 45 calendar days, or notify you of a lawful extension.

Some data, such as precise geolocation, account credentials, and certain financial or payment information, may be considered sensitive personal information under California law. We use it only as reasonably necessary to provide the Service, protect security, comply with law, or for other permitted purposes; we do not use or disclose it to infer characteristics about you.

10. Children and Minors

The Service is intended for business users age 18 and older. We do not knowingly collect personal information directly from children under 18. If you believe a minor has provided us personal information in violation of this Policy, contact privacy@masterappai.com so we can investigate and take appropriate action. Business customers are responsible for ensuring that any information they upload concerning minors is collected and processed lawfully.

11. Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices, technologies, legal requirements, or the Service. If changes are material, we will provide notice by email to the address associated with your account and/or through the Service before the changes take effect, when reasonably practicable. The updated Policy will display a new effective date. Your continued use of the Service after the effective date is subject to the updated Policy.

12. Contact

For privacy questions, requests, or concerns, contact our privacy contact/DPO alias:

MasterApp Suite AI, LLC Rockville, Maryland 20855, USA Email: privacy@masterappai.com General information: info@masterappai.com

This document was drafted as a template. Consult with a qualified attorney for jurisdiction-specific advice.

MasterApp Suite AI, LLC — Maryland (Department ID W27131523). Contact info@masterappai.com or support@masterappai.com.