Privacy Policy

1. Introduction

Maple is operated by Makisuo, Inc. ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use the Maple observability platform and related services (the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. Authentication is handled by Clerk, a third-party authentication provider.

Telemetry Data

The Service ingests OpenTelemetry data (traces, logs, and metrics) that you send from your applications. This data is owned by you and processed solely to provide the Service.

Usage Data

We collect basic usage information such as page views, feature usage, and performance metrics to improve the Service. We use our own product to do this: our website and dashboard run the Maple browser SDK, and this data is stored in our own systems rather than shared with a third-party analytics provider.

This includes a sampled recording of page interactions (clicks, navigation, and console or network errors) so we can diagnose problems. Text entered into form fields is masked before it leaves your browser and is never recorded. See Cookies and Similar Technologies for how to opt out.

3. How We Use Your Data

• To provide and maintain the Service
• To authenticate your identity and manage your account
• To process and display your telemetry data
• To send service-related communications
• To improve the Service and develop new features
• To comply with legal obligations

4. Google User Data

If you connect Google Search Console, Maple asks for read-only access to your Search Console data (the webmasters.readonly scope) and your Google account email address.

• What we access: the list of Search Console properties you can see, search performance for the properties you choose (queries, pages, clicks, impressions, click-through rate, position, country and device), and your Google account email address, which Maple shows in the integration settings so your team knows which account is connected. Maple never changes anything in your Search Console account.
• How we use it: only to show search performance in your Maple workspace, next to your other telemetry, and to answer questions you ask Maple's assistant about it. Data is imported on a schedule while the connection is active.
• How we store it: OAuth tokens are encrypted at rest and kept with your connected account's email address until you disconnect. Imported metrics are stored in your workspace and kept for up to 520 days.
• Sharing: we do not sell Google user data, use it for advertising, or use it to train AI models. It is only visible to members of your workspace and is processed by the infrastructure providers that run the Service.
• Removal: disconnecting Search Console in Maple revokes our access at Google and deletes the stored tokens and account email address. You can also revoke access at myaccount.google.com/permissions. To have imported data deleted, contact us.

Maple's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

Telemetry data is retained according to your plan's retention period. Account information is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Third-Party Services

We use the following third-party services to operate the platform:

• Clerk — Authentication and user management
• Tinybird — Analytics data processing and storage
• OpenTelemetry — Telemetry data collection standard

Each third-party service has its own privacy policy governing their handling of data.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your telemetry data
• Withdraw consent for data processing

9. Cookies and Similar Technologies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies, and we do not sell or share this data with advertisers.

We also set one first-party analytics identifier, maple_visitor, stored as a cookie and in your browser's local storage. It is a random identifier — it contains no name, email, or address — and it lets us count unique visitors and understand which pages lead people to sign up. Because it is scoped to maple.dev, it is shared between our website and our dashboard so that both count as the same visit rather than two. It expires after 13 months.

We honor the Global Privacy Control signal: if your browser or extension sends it, we do not set this identifier, and any copy already stored is deleted. Clearing your cookies and site data removes it as well.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@maple.dev.