Mauzo-Ultra
Your business. Your information.
Mauzo-Ultra provides Mauzo-Ultra. This notice explains how the app handles information.
What we store
We store your account contact details, business and branch settings, staff permissions, and the records you enter: products, services, customers, sales, debts, expenses, appointments and jobs. Security records include sign-in sessions, device descriptions, verification status and audit events. Passwords are hashed; passkeys store public keys, not fingerprints or facial images.
How information is used
We use these records to run your workspace, enforce permissions, calculate reports, verify subscriptions, deliver requested account emails and respond to support requests. Authorized staff see only the branches and functions their permissions allow. Platform support has access to subscription and support records for administration.
Service providers
Hosting and email providers process the data needed to operate this service. If you choose online subscription payment, DPO handles the checkout; Mauzo-Ultra stores payment references and verification results, not your full card details. If you request AI insights, business summary data is sent to Groq to produce the response. Do not enter unnecessary sensitive personal information in free-text fields.
Data on your device
The app uses an essential session cookie and remembers your language and appearance preferences. Offline storage is optional and protected by a separate device passphrase. Lock it on shared devices. Unsynced work exists only on that device; clearing browser storage can permanently remove it. A revoked online session cannot notify a disconnected device until it reconnects.
Optional phone notifications
If you enable phone notifications, we store your device’s push subscription, its encryption keys, linked account session and selected branch, notification preferences, read status and recent delivery attempts. Your browser’s push provider routes encrypted messages to the device. Lock-screen messages do not include customer names or financial amounts. We record recent online activity for the selected branch to avoid unnecessary reminders. You can disable phone notifications in the notification center or browser settings. Signing out or revoking a session stops future sends; notifications already delivered can remain on the device.
Access and deletion
You can review your records, export available reports, manage trusted sessions and request deletion. A staff member’s personal sign-in details can be removed while transaction records belonging to their employer remain. Owners should export records they need before closing a business. Any legally required retention and copies held by payment providers are handled separately and explained when applicable.