Privacy practices,in plain language.

What we collect

Contact details you submit: name, work email, company, role, and any context you provide through the Assessment, Strategy Session, or contact forms.

Analytics: page views, referrer, country, and device class. We use a privacy-first analytics tool (Plausible) that does not set cookies, fingerprint users, or collect personal data.

Business visitor identification: for visitors connecting from corporate IP ranges, we perform a reverse-IP lookup to identify the visiting company(not the individual). Visitors on residential, mobile, cloud, or VPN networks remain anonymous. This is used solely to inform Maple's sales and marketing operations — never shared externally.

How we use it

To respond to your inquiry, schedule strategy sessions, route your message to the right Maple team member, and — only where you've opted in — send occasional product or thought-leadership updates. We do not sell your data and do not share it with third parties for advertising or retargeting.

Subprocessors we use

The following service providers process site data on our behalf, each under their own security and confidentiality terms:

• Salesforce: CRM of record for form submissions
• Resend: transactional email delivery for confirmations and alerts
• Plausible Analytics: privacy-first, cookieless web analytics
• Netlify: site hosting and serverless function runtime
• ipinfo.io: IP-to-company lookup for business visitor identification

Cookies

This site does not use cookies for tracking, advertising, or analytics. The only storage you may see is short-lived session storage used to dedupe form submissions and prevent accidental double-sends.

How long we keep it

Form submissions are retained in Salesforce indefinitely as part of our customer relationship records, or until you request deletion. Analytics data is aggregated and retained for up to 24 months. Visitor identification records are aggregated by company and retained for 90 days.

Your rights

You may request, at any time, to:

• access the personal data we hold about you
• correct inaccurate data
• delete your data from our active systems
• opt out of any marketing communications

Email info@mapledx.com and we'll action your request within 30 days.

Engagement data

Any data you share with Maple inside a paid engagement (workshops, implementations, managed operations) is governed by the master services agreement signed for that engagement — including SOC 2, HIPAA, and GDPR commitments where applicable. The agentic architectures we deploy keep your data inside your trust boundary by design.

International transfers

Maple operates in the United States and our subprocessors are predominantly US-based. If you are submitting information from outside the US, your data will be transferred to and processed in the US. By using this site, you consent to that transfer.

Changes to this policy

We may update this policy as our practices evolve. Material changes will be flagged at the top of this page with at least 30 days' notice. The “last updated” stamp below reflects the most recent revision.