This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. It is written in plain English. If anything is unclear, write to us at maverick@speedloopauto.com.
1. Who we are
MAVERICK - Applied Intelligence for your Business is offered by Speedloop Technologies, an offering of Speedloop Auto Private Limited (India) ("Speedloop", "we", "us").
- Registered address: 2nd Floor, Plot No. 296, Sector 10, PCNTDA, Pimpri Chinchwad, Pune, Maharashtra 411039, India
- Privacy contact: maverick@speedloopauto.com
Speedloop Auto Private Limited is the business responsible for the personal information described in this policy (in GDPR terms, the "controller"; under California law, the "business"). Our team works from India and our services are offered remotely. We are in the process of setting up a U.S. company and an office in New York so that U.S. customers can work with a local Speedloop business. Until that company is in place, Speedloop Auto Private Limited remains the business responsible, and we will update this policy when the U.S. company takes on that role.
2. What this policy covers
This policy covers personal information we handle for our own purposes through:
- Our website, maverick.speedlooptech.app (our earlier address, maverick.speedloopauto.com, leads to the same site), including the supply-partner application form.
- The Maverick Console at maverick.speedlooptech.app/console (or through our earlier address): the user accounts, sign-in, security and usage records we keep to run it.
- Sales and partner conversations: emails, calls, meetings and the records we keep in our customer relationship management (CRM) system.
It does not cover the business records a customer loads into its own Console workspace. For that data the customer decides what is collected and why, and we act on the customer's written instructions as its processor or service provider. Our Data Governance page explains how that works. If you want to exercise rights over data a customer holds about you, contact that customer; if you contact us, we will pass your request to them.
3. What we collect and why
| Where it comes from | What we collect | Why we use it |
|---|---|---|
| Supply-partner form on the website | Company name and website, your name, role, work email and phone (optional), industry and sub-industry, products or services offered, service territory, an optional supporting link, your consent and the time you submitted | To review your application, contact you about it and, if there is a fit, discuss working together. The application is saved in our website database and a copy is sent to ATLAS, Maverick's supplier directory in the Maverick Console, where our team reviews it |
| Emails and enquiries you send us (for example to maverick@speedloopauto.com) | Your name, email address, organisation, role and whatever you choose to tell us | To reply, discuss a possible engagement and keep a record of the conversation |
| Sales outreach and our CRM | Business contact details (name, role, organisation, work email, work phone, business location) that you give us or that are published in business sources such as company websites and public directories; notes of our conversations; whether you asked us not to contact you | To find and contact businesses that may benefit from our services, keep track of conversations and respect opt-outs |
| Website analytics | Pages viewed, referring site, browser and device type, approximate country, and a short-lived visitor hash created by Vercel Web Analytics without cookies | To understand which pages are useful and keep the site working |
| Meta Pixel (only if we switch it on and you click Accept in the cookie banner; see section 4) | Pages viewed, browser information, IP address, Meta cookie identifiers, and a "Lead" event when the supply-partner form is submitted. We never send your name, email or phone to Meta | To measure whether our advertising reaches relevant businesses |
| Console accounts | Name, work email, organisation, role in each workspace, language and display preferences, two-factor enrolment status and method, a scrambled copy of each sign-in code we email you (deleted within a day), sign-in and session times, and the IP address of each request | To provide the Console, keep accounts secure, enforce your organisation's sign-in rules (idle sign-out and IP allow-lists) and support you |
| Console activity records | Which workspace and Purpose you used, which datasets you read (not their content), changes you made, approvals you gave or requested, AI questions asked (counted; the question text is not kept in the audit log), toolkit runs, and bug reports you send | Security, accountability to your organisation, plan limits and fixing problems |
| Online payments in the Console ("Pay now" in Settings → Billing, when switched on) | The item and amount paid, the payment status, PayPal's payment reference and which account started the payment. You enter your name, email, billing details and card or PayPal account on PayPal's own page; we never receive card numbers | To record the payment, give your organisation what it paid for, handle refunds and keep financial records |
| Console referral page | Your work email, the referral code you arrived with and your consent; a referral cookie | To set up an account you requested and credit the person who referred you |
| Hosting and server logs | IP address, browser, time and requested address, processed by our hosting providers | To deliver pages, detect abuse and keep the services secure |
We collect information directly from you, automatically when you use our website or Console, from your organisation when it creates an account for you, and from public business sources as described above.
We do not ask for and do not want sensitive information such as health data, government ID numbers or payment card numbers through our website or Console account pages. Please do not include such information in forms or bug reports. California law treats a Console sign-in (email and password together) as sensitive personal information; we use it only to sign you in and keep your account secure. Passwords are handled by our authentication provider, Supabase, and are not visible to our staff.
4. Cookies and similar technologies
Website. Vercel Web Analytics counts visits without cookies. If we use the Meta Pixel, it loads only after you click Accept in the cookie banner; until then no Meta code runs and no Meta cookie is set. When it runs, it sets Meta cookies (such as _fbp) so Meta can measure our advertising. If your browser sends a Global Privacy Control signal, we treat it as Decline and do not show the banner. We remember your choice in one first-party cookie, mav_consent, for 12 months. You can change it at any time with Cookie settings at the bottom of each page; if you withdraw, we remove the Meta cookies we can reach and the pixel does not load again. Our website fonts are served from our own site, not from Google.
Console. The Console uses cookies that are necessary for it to work: your sign-in session, the workspace and Purpose you selected, and, if you arrived through a referral link, a mav_ref cookie that lasts 30 days. The Console also loads:
- fonts from Google Fonts, so Google receives your IP address and browser information;
- map and weather-radar images from map providers (such as Esri, CARTO, OpenTopoMap, OpenStreetMap-based services, RainViewer and, if enabled, Mapbox), which receive your IP address and the map area you are viewing;
- place search from Photon (komoot), which receives the place name you type.
None of these providers receives your workspace records.
5. Legal bases (where GDPR, UK GDPR or similar laws apply)
- Contract: to provide Console accounts to your organisation and to you as its user.
- Legitimate interests: business-to-business outreach, replying to enquiries, reviewing supplier applications, securing our services, and understanding website use. We weigh these interests against your rights, and you can object at any time.
- Consent: where we ask for it, such as the supply-partner form checkbox, referral access requests, and any advertising cookies that require consent where you live. You can withdraw consent at any time.
- Legal obligation: where we must keep or disclose information by law.
6. Who we share personal information with
We do not sell personal information. We do not trade it, rent it or move one customer's data to another customer. We share it only with the service providers that help us run our business, under contracts that limit their use of it:
| Provider | What they do for us | Where |
|---|---|---|
| Vercel | Hosts the website and Console; website analytics | United States and global edge network |
| Supabase | Database, file storage and sign-in for the Console; stores website form submissions | United States (Console: US East, Virginia); Supabase cloud (website forms) |
| Zoho | CRM and business email | India |
| Anthropic | AI answers and explanations in the Console, only when AI is enabled for a workspace | United States |
| Meta | Advertising measurement, only if we enable the Meta Pixel | United States and global |
| Resend | Sends Console two-factor sign-in codes and, when this feature is configured, location-radar warning emails | United States |
| Linear | Receives bug reports sent from the Console, when this feature is configured | United States |
| PayPal | Takes online payments when a customer pays through PayPal | United States and global |
| Serves fonts used by the Console | Global |
We may also share information with professional advisers (such as lawyers and accountants) under confidentiality duties; with authorities when the law requires it or to protect people, our services or our rights; and with a buyer or successor if our business is reorganised or sold, in which case this policy will continue to protect your information.
7. How long we keep it
We keep personal information only as long as we need it for the purposes above, then delete or de-identify it. Our current retention targets are:
- Supply-partner applications: while we review the application and for up to 24 months after our last contact, unless we start working together.
- Sales, CRM and email records: for up to 24 months after our last interaction, or longer if we become a customer or supplier and the records are needed for that relationship. If you ask us not to contact you, we keep a minimal record of that request so we can respect it.
- Console accounts: for as long as the account is active, and up to 90 days after it is closed, unless your organisation's agreement says otherwise.
- Console audit records: the Console's audit log is append-only by design, so a record of who did what (for example, "this user read this dataset at this time") stays for the life of the workspace, even after an account is closed. It does not contain the content of the data read.
- Analytics: Vercel Web Analytics keeps aggregated statistics; its visitor hash is not stored long term.
- Records we must keep by law (such as invoices and tax records): for the period the law requires.
8. Your choices and rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information;
- stop using it for outreach or advertising measurement, or object to other uses;
- give you your information in a portable format.
To make a request, email maverick@speedloopauto.com with the subject "Privacy request". We will confirm receipt, may ask you to verify your identity (usually by replying from the email address we hold), and will respond within the time the applicable law allows, normally within 30 to 45 days. You can use an authorised agent; we may ask for proof of their authority. We will not treat you differently for exercising your rights.
To stop marketing emails, reply "unsubscribe" or use the opt-out in the email.
United States: California (CCPA/CPRA)
In the last 12 months we collected these categories of personal information: identifiers (name, email, phone, IP address, cookie identifiers); professional or employment information (organisation and role); internet or network activity (website and Console usage); approximate location derived from IP address; and account sign-in credentials. The sources, purposes and recipients are described in sections 3 and 6, and retention in section 7.
California residents have the rights to know, delete and correct personal information, to opt out of the "sale" or "sharing" of personal information, and to non-discrimination. We do not sell personal information. If we enable the Meta Pixel, that may be treated as "sharing" for cross-context behavioural advertising; you can opt out by clicking Decline in the cookie banner (or later under Cookie settings), by sending a Global Privacy Control signal, or by emailing us with the subject "Do not share my personal information". We use sensitive personal information (Console sign-in credentials) only to provide and secure the service, so the right to limit its use does not need to be exercised.
United States: Texas (TDPSA) and other states
Residents of Texas and other U.S. states with similar privacy laws can ask us to confirm whether we process their personal data, access it, correct it, delete it, receive a portable copy, and opt out of targeted advertising, sale of personal data, or profiling that has legal or similarly significant effects. We do not sell personal data and do not use it for such profiling. If we decline your request, you can appeal by replying to our decision with the subject "Privacy appeal"; we will respond to an appeal within 60 days. If you are not satisfied with the outcome, you can contact your state Attorney General (in Texas, at texasattorneygeneral.gov).
We will respond to privacy requests from any U.S. resident, whether or not a particular state law applies to us.
European Economic Area and United Kingdom (GDPR / UK GDPR), where applicable
We do not currently direct our services to people in the EEA or UK. Where GDPR or UK GDPR applies, you also have the rights to restrict processing and to withdraw consent, and you can complain to your local data protection authority. We would appreciate the chance to resolve your concern first.
India (Digital Personal Data Protection Act), where applicable
Where the DPDP Act and its Rules apply, you can ask for a summary of the personal data we process and with whom we have shared it, ask us to correct, complete, update or erase it, nominate another person to exercise your rights, and raise a grievance with us at maverick@speedloopauto.com. If we do not resolve your grievance, you may approach the Data Protection Board of India.
9. International transfers
Our team works from India, and we are setting up a U.S. company and an office in New York (see section 1). The Console's database and files are hosted in the United States (Supabase, US East), our websites run on Vercel's global network, our CRM and email are with Zoho, and AI features, when enabled, use Anthropic in the United States. This means your personal information may be accessed from India and stored in the United States and other countries whose laws differ from yours. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.
10. Security
We protect personal information with access controls, audit logging, two-factor authentication options and other measures described in our Security Overview. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach that affects your personal information, we will notify you and the authorities as the law requires.
11. Children
Our services are for businesses. They are not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to this policy
We will update this policy when our practices change. We will change the "Last updated" date at the top and, for significant changes, tell Console users and customers before the change takes effect.
13. Contact us
Speedloop Technologies, an offering of Speedloop Auto Private Limited (India)
2nd Floor, Plot No. 296, Sector 10, PCNTDA, Pimpri Chinchwad, Pune, Maharashtra 411039, India
Email: maverick@speedloopauto.com