Privacy Policy
Version 0.1 (draft) · Effective 22 October 2026
1. Who is responsible
Berk Strategic Ventures LLC, a limited liability company doing business as BSV Soft ("BSV Soft", "we", "us"), 2378 127th Ave NE, Bellevue, WA 98005, USA, is the controller of personal data processed for Maison Calibre. Phone: (425) 376 2691. Contact: info@bsvsoft.com.
For any inquiries under GDPR (EU and UK), you can reach us directly at info@bsvsoft.com.
2. What we collect
- Email address, when you create an account, buy, or ask for news. It identifies your account and lets us send you sign-in links, receipts and what you asked for.
- Watch identifiers: a per-app device identifier for each face or Maison Key installed on your watch, and the Maison Key ID. These are pseudonymous and are used to check your trial and unlock the faces you own.
- Device model, for example "fēnix 8 47mm", to give you the right face and to support you.
- Licence and trial state: which faces you own, your edition, your membership and credits, your trial start and end, and the watches linked to your account.
- Purchase records and consents received from the Merchant of Record: what you bought and when, the order reference, your country, and the consents you gave at checkout (immediate delivery, automatic renewal). We do not receive your card number.
- Marketing-consent records: whether you agreed to marketing email, when, where (sign-up or checkout), the wording shown, and any withdrawal or unsubscribe. We keep these as proof of your choice.
- Referral tracking: if you arrive through a VIP creator's or an Ambassador's link or a campaign coupon, we record which link or code, so we can credit the referral and pay commission or rewards. We use a first-party record of the link for this and no third-party advertising trackers.
- VIP payout data: for VIP creators we keep the payout email address and whether a tax form (W-9 or W-8BEN) is on file. We never keep tax ID numbers; the tax forms are handled by the payout service, and we receive only the status.
- Terms acceptance: the versions of the Terms and Privacy Policy you accepted, and when.
- IP address and basic technical data in server logs, used for rate limiting, fraud prevention and security.
- Messages you send us, such as support emails.
- Anonymous page and survey statistics on our pre-launch page (/early and /survey): which buttons were pressed, which faces were liked, your answers to the short survey (how often you would change faces, finished or your own design, what you would pay), and the step you reached. Each browser gets a random identifier that is not linked to your name or email; it lasts for your visit, or longer only if you press Accept on the cookie banner. We also keep the campaign tags of the link you came from (such as utm_source), the website you came from, whether you used a phone or a computer, and your country (from the hosting provider's country header; we do not store your IP address). We use this to learn whether to build and how to price it. If you leave your email on that page it is saved separately from these statistics, with your choice about news and offers, and is never mixed into them. Your browser's Do Not Track or Global Privacy Control signal switches the statistics off.
We do not store health data. Faces read data such as your heart rate locally on the watch to display it. That data stays on the watch and is never sent to us.
3. Why we use it and our legal bases
If you are in the European Economic Area or the United Kingdom, the GDPR and UK GDPR require a legal basis. Ours are:
- Contract: to create your account, deliver and unlock your faces, process orders, manage memberships and credits, and give support (email, watch identifiers, device model, licence and trial state, purchase records).
- Legitimate interests: to keep the Service secure, prevent fraud and abuse, apply rate limits, fix errors, and keep records of your acceptance of our terms (IP addresses, logs, terms acceptance). We balance these interests against your rights, and you may object (see section 9).
- Consent: for marketing email (a separate choice, never a condition of buying) and for any non-essential cookies or analytics, if we add them. You can withdraw consent at any time without affecting earlier processing.
- Legal obligation: to keep accounting and tax records.
4. Who processes it
We share personal data only with providers that help us run the Service, under contracts that limit their use of it:
- Supabase (database, authentication and server functions);
- Vercel (website hosting and delivery);
- Polar (payments, tax and invoices; it also acts as an independent controller of its own customer records, see its privacy policy);
- Transactional email provider (sign-in links, receipts and news); and
- professional advisers, authorities, or a buyer of the business, where the law or a legitimate transaction requires.
Garmin is not our processor. Faces are installed through Garmin's Connect IQ store, and Garmin's own privacy policy governs what you share with Garmin.
5. We do not sell your data
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined in California law (CCPA/CPRA) and similar laws. We have no third-party advertising cookies.
6. How long we keep it
We keep personal data only for as long as necessary to provide the Service and comply with legal obligations:
- Account, licence and watch data: while your account is active, then 12 months after closure.
- Purchase records: 7 years, or as long as tax and accounting law requires.
- Server logs and IP addresses: 30 days.
- Terms acceptance records: duration of the account plus 6 years.
- Support emails: 24 months.
- Anonymous pre-launch page statistics: 12 months.
- Marketing email and consent records: until you unsubscribe, then a record of your choice for up to 3 years.
- Referral and payout records: 7 years, as tax and accounting law requires.
7. Security
We use measures appropriate to the risk, including encryption in transit, access controls and least-privilege access to the database, row-level security, signed licence tokens, rate limiting, and separation of payment data (which stays with the Merchant of Record). No system is perfectly secure.
8. Breaches and international transfers
If a personal data breach affects you, we will notify you and the authorities as the law requires.
We are based in the United States and our providers may process data in the United States and other countries. Where we transfer personal data from the EEA, UK or Switzerland to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) or the EU-US Data Privacy Framework where a provider is certified.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- receive a portable copy of data you gave us;
- object to processing based on legitimate interests, and to direct marketing;
- restrict processing, and withdraw consent; and
- complain to your data protection authority.
US state rights (including California, CCPA/CPRA). Residents of states with privacy laws may also have the rights to know, access, correct, delete and port their data, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information and do not use it for targeted advertising, so there is nothing to opt out of. We will not discriminate against you for using your rights. You may use an authorised agent, and we may need to verify your identity. If we deny a request you may appeal by replying to our decision.
To use any right, email info@bsvsoft.com. We aim to respond within one month (45 days in some US states).
10. Children
Maison Calibre is not for children. We do not knowingly collect personal data from anyone under 16, and in no case from anyone under 13. If you are under 16 (or the age set by your country), do not create an account or give us personal data. If we learn we have collected data from a child, we will delete it. Contact us if you think this has happened.
11. Cookies and Do Not Track
See our Cookie Notice. We use the cookies and storage needed to keep you signed in and remember preferences (including your cookie choice), and, only if you press Accept on our cookie banner, a referral cookie that lasts 30 days. Because we do not track you across other websites or services, we do not change how the Site works when your browser sends a "Do Not Track" signal.
12. Changes
We may update this policy. For material changes we will notify you, for example by email or a banner when you sign in. The version and effective date at the top show which version applies.
13. Contact
BSV Soft, 2378 127th Ave NE, Bellevue, WA 98005, USA. Phone: (425) 376 2691. Email: info@bsvsoft.com.