Privacy Policy
Terms and Conditions
Last updated: July 16, 2026
This Privacy Notice describes how personal data is collected and processed in connection with the MaunaOne platform, a technological and billing solution for businesses offering experiences, activities, events, tours, workshops, and tastings.
1. Who is responsible for your data
MaunaOne is operated by two entities within the same group, depending on your location:
Users in Mexico and Latin America: Maunify, S.A.P.I. de C.V. ("Maunify"), located at Calle del Arco 103, Lomas de la Herradura, Mexico
Users in the United States and the rest of the world: Maunify Corp
In this notice, "MaunaOne", "we", or "the data controller" refers to the corresponding entity based on your location.
Dual role. MaunaOne acts as the data controller for the data of site visitors and registered Sellers. Regarding the data of Buyers who book through a Seller, MaunaOne acts as a data processor (technology provider) that processes this data on behalf of and under the instructions of the Seller, who is the controller responsible to their Buyers.
2. To whom this notice applies
Visitors of
maunaone.comand related sites.Sellers: businesses (and their contacts) that create an account to sell through the Platform.
Buyers: individuals who book an Event through a Seller. For them, this notice explains MaunaOne's role; the processing of their data to execute the Event is additionally governed by the Seller's privacy notice.
3. What personal data we collect
From Sellers (as controller):
Identification and contact data: name, email address, and phone number.
Account and Platform usage data (Events, bookings, activity).
Basic technical data (IP address, access logs).
From Buyers (as processor, on behalf of the Seller):
Name, email address, and phone number necessary to process the booking and send confirmations.
What we DO NOT collect:
We do not store payment data (card numbers): this is processed directly by Stripe.
We do not store tax or banking data of the Seller (RFC, accounts): these remain in Stripe.
We do not collect sensitive personal data. If a Seller decides to include additional questions in their booking process that capture sensitive data (for example, health conditions), the Seller is responsible for that processing and the corresponding consent.
4. Why we use your data (purposes)
Primary purposes (necessary to provide the service):
a) To create, authenticate, and manage the Seller's account.
b) To operate booking functions, calendar, online billing, and analytics.
c) To process payments through Stripe.
d) To invoice the subscription and applicable commissions.
e) To provide support and operational communication (email, WhatsApp, chat).
f) Security, fraud prevention, and compliance with legal obligations.
g) To maintain and improve the Platform through internal analytics.
MaunaOne does not use your data for its own marketing purposes nor does it sell it. Any marketing activity that a Seller carries out with their Buyers' data occurs outside of the Platform and is the responsibility of the Seller.
5. Legal basis for processing
We process your data based on, as applicable: the contractual relationship with you (to provide the service you request), your consent (free, specific, and informed), compliance with legal obligations, and our legitimate interest in operating, securing, and improving the Platform. For EEA/UK users, these are equivalent to the legal bases under the GDPR.
6. With whom we share your data
We share data only with service providers who perform services for us (processors), under confidentiality obligations and solely for the purposes stated above. The main ones are:
Stripe — payment processing (applies to Sellers and Buyers).
HubSpot — Seller relationship management (CRM).
Intercom (including its AI assistant) — support and messaging.
Chargebee — subscription management.
Typeform — registration forms.
Google Workspace — internal operations.
WhatsApp / Meta — communication with Sellers.
Cloud hosting provider AWS.
Most of these providers are used for operations with Sellers. We may also disclose data when required by a competent authority in accordance with the law. We do not sell personal data.
7. International transfers
Some of our providers operate in the United States or other countries. By using the Platform, your data may be transferred and processed outside of your country of residence. We take reasonable measures to ensure that such transfers have appropriate protections in accordance with applicable legislation.
8. Cookies and tracking technologies
The MaunaOne site uses essential and functional cookies necessary for its operation. MaunaOne does not, by itself, deploy advertising tracking on the Sellers' sales pages. A Seller may incorporate their own tools (for example, tracking pixels or analytics) on their pages; that processing is the responsibility of the Seller and is governed by their own notice.
9. Data retention
We retain your data for as long as you have an active account and for any additional periods required by applicable legal, tax, or accounting obligations. After that, we delete or anonymize it.
10. Security
We implement reasonable administrative, technical, and physical security measures to protect your data against loss, misuse, or unauthorized access. No system is completely infallible; in the event of an incident that affects you, we will act in accordance with applicable law.
11. Your rights
Depending on your location, you have different rights. To exercise them, write to us at support@maunaone.com with your request and the details needed to identify you.
Mexico (new LFPDPPP). You have the right to Access, Rectification, Cancellation, and Opposition (ARCO rights), as well as to revoke your consent and limit the use or disclosure of your data. The competent authority is the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Government), with whom you can file a complaint.
United States / California (CCPA/CPRA). You have the right to know what data we process, to request its deletion, to correct it, to object to the sale or sharing (we do not sell or share data for that purpose), to limit the use of sensitive data, and not to receive discriminatory treatment for exercising your rights.
European Economic Area and United Kingdom (GDPR). When we process your data, you have the right of access, rectification, erasure, restriction, portability, and objection, to withdraw your consent, and to lodge a complaint with your supervisory authority.
Other regions. We will address requests in accordance with the data protection laws applicable to you.
12. Minors
The Platform is not directed to individuals under 18 years of age. A minor may only use it with the participation of a parent or guardian who assumes the corresponding obligations.
13. Changes to this notice
We may update this Privacy Notice. We will publish the current version at https://maunaone.com/privacy-policy with its update date and, when required by law, we will communicate it to you through available means.
14. Contact
For any questions about this notice or the treatment of your data: support@maunaone.com.
