Privacy
Main Street Studio is run by Jihan Raiyan, a sole proprietor in New York. This page explains what the service collects, why it collects it, and who else touches it. It is written to be read, not to be survived.
Who runs this service
Main Street Studio is operated by Jihan Raiyan as a sole proprietorship based in New York. There is no parent company and no investor with access to your data. For anything on this page, including a request to delete your information, write to jihanraiyan@live.com.
What we collect
Account information
When you create an account we collect your email address, the name of your business, and either a password or, if you sign in with Google, the basic profile information Google returns. We never see or store your Google password.
Screen content
Whatever you put on your screens: menu items, prices, hours, specials, sold-out notices, and any other text or images you send us to display.
Messages you send us
Your phone number and the full content of the text messages you send to update your screens, along with the time each message arrived. We keep the message history so you can see what changed and when, and so the service can be debugged when something displays wrong.
Basic technical information
Standard server and delivery logs: IP address, browser type, and which screen page was requested. These are a byproduct of running a website and are used for security and troubleshooting.
We do not collect payment card numbers. If and when the service charges money, that will be handled by a payment processor and this page will be updated before it happens.
How we use it
- To create and secure your account and sign you in.
- To interpret your text messages and update your screens accordingly.
- To display your content on the screens you have set up.
- To reply to you about your account and about problems with the service.
- To keep the service working, which includes investigating bugs and abuse.
We do not sell your information. We do not rent it. We do not use it to target advertising, and we do not let anyone else do so.
Text messaging
Texting is how the product works, so this section matters more here than it would for most services. You give consent to receive messages from us when you provide your phone number during setup and confirm that you want your screens managed by text. That consent is not a condition of any purchase.
Message frequency varies and depends on how often you update your screens. Message and data rates may apply. Reply STOP to any message to opt out of all automated messages from us, or HELP for help. You can also opt out by emailing jihanraiyan@live.com.
We do not sell, rent, lease, or share mobile opt-in information or phone numbers with third parties for marketing purposes. Phone numbers are shared only with the messaging provider that delivers the messages on our behalf, which is required for the service to function.
Opting out stops the automated messages that update your screens, which means the text-to-update feature stops working for you. Your account and existing screen content are not deleted by opting out. Contact us if you want the account removed as well.
Artificial intelligence
The messages you send are read by a large language model so the service can work out what you meant. When you text “86 the wings,” a model interprets that as a request to mark an item unavailable and the change is applied to your screen. To do this, the content of your message and the current contents of your menu are sent to a third-party AI provider.
Your messages and menu content are not used to train AI models, ours or anyone else’s. We use business API tiers that contractually exclude customer data from training.
Models make mistakes. The service is built so that you can see and correct what changed, but you should check your screens after an unusual request.
Google sign-in
If you sign in with Google, we request only your basic profile: your name, email address, and profile picture. We do not request access to your Gmail, Drive, Calendar, contacts, or any other Google service, and we could not read them if we wanted to.
Main Street Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely: information from Google is used only to sign you in and identify your account, is never sold or transferred except as described on this page, and is never used for advertising.
You can disconnect Main Street Studio from your Google account at any time in your Google account’s security settings.
Who else touches your data
Running the service means using other companies. Each one receives only what it needs to do its job, and none of them are permitted to use your information for their own purposes.
- Netlify hosts this website and serves your screen pages.
- Convex stores your account, your menu content, and your message history.
- A messaging provider delivers and receives your text messages. We are currently evaluating Sendblue and Twilio, and this page will name the one in use before any customer messages are sent through it.
- An AI provider interprets your messages, as described above.
- Google, if and only if you choose to sign in with Google.
- Cal.com handles the onboarding call booking, including the name and email you enter when scheduling.
We may also disclose information if we are legally required to, or where it is necessary to protect someone’s safety or to investigate abuse of the service.
How long we keep it
Account information and screen content are kept for as long as your account is open. Message history is kept for two years, which is long enough to be useful for troubleshooting and for you to review your own changes.
When you close your account, we delete your account information, screen content, and message history within thirty days. Server logs roll off on their own within ninety days. Backups may hold copies slightly longer, and those expire on their own schedule.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email jihanraiyan@live.com and we will respond within thirty days. There is no form to fill in and you do not need to give a reason.
Depending on where you live, you may have additional rights under state privacy law. We extend the rights described above to everyone rather than checking which state you are in.
Security
Connections to the site and to your screens are encrypted. Passwords are hashed, never stored in a form we could read, and never logged. Access to production data is limited to the operator of the service.
No service is perfectly secure, and it would be dishonest to claim otherwise. If we ever discover a breach affecting your information, we will tell you what happened and what to do about it.
Children
This is a tool for businesses. It is not directed at children under thirteen, and we do not knowingly collect their information. If you believe a child has given us information, email us and we will delete it.
Changes to this page
If we change how information is used in a way that matters, we will update the effective date at the top of this page and email account holders before the change takes effect. If a change requires your consent, we will ask for it rather than assume it.
The companion terms of service covers the rules for using the product itself.