What we collect
Account information. Your name, work email, password (stored only as a salted hash), and your role in your company's workspace.
Company and brand information. What you tell us during onboarding: your website, description, audience, goals, budget, brand voice, and compliance constraints. Your agents use this to do their work.
Connected accounts. When you connect an advertising or social account (Meta, Google, LinkedIn, X and others), the platform stores the access token that account issued to Mayaa, scoped to what you authorized. We never see or store your password for those services. You can revoke access at any time from the platform or from the provider.
Leads and contacts you bring. Names, email addresses, and related fields that you import, capture through your own forms, or that the platform collects on your behalf — together with the consent status and source for each record.
Performance and usage data. Campaign metrics read from your connected accounts, conversion events (where we hash email addresses and IP addresses before storing them), and your usage of the platform including AI processing volume.
Billing. Payment is processed by Stripe. We store your Stripe customer and subscription identifiers, not your card number.
How we use it
- To run your marketing: plan strategy, draft content, propose and execute approved actions in your connected accounts, and report results.
- To send email you have asked for — transactional messages (password resets, invitations) and, for contacts with recorded consent, campaigns on your behalf.
- To operate, secure, and improve the platform, including measuring how the AI agents perform.
- To bill you for your plan and usage.
We do not sell personal information, and we do not use your data to advertise to you.
AI processing
Your agents are powered by large language models from third-party providers (currently Anthropic and Google, with OpenAI for optional voice features). Prompts include the business context and data needed to complete a task. We use API tiers under which providers do not train models on your data.
Where your data goes
We use a small set of sub-processors, each under a data-processing agreement: Amazon Web Services (hosting, database, email delivery), Anthropic, Google, and OpenAI (AI models), Pinecone (knowledge retrieval), Firecrawl (reading public web pages you point us at), and Stripe (payments). Data is stored in the United States.
When your agents act in a connected account or send an email, the relevant content and recipient data necessarily goes to that platform or recipient — that is the service working as intended.
Consent and email
The platform will not email a contact unless that contact's consent is recorded as subscribed, and it honours unsubscribes, bounces, and complaints automatically. Every campaign email carries an unsubscribe link. You are responsible for the lawful basis of the contacts you bring to the platform.
Retention and deletion
We keep your data for as long as your workspace is active. When a subscription ends, we purge the workspace's contact data and knowledge base. You can ask us to delete your workspace entirely at any time by emailing hello@mayaa.agency; we will confirm when it is done. Backups age out on a rolling seven-day cycle.
Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorised personnel, secrets are held in a managed vault, and every action your agents take that touches money is gated by approval rules and spend limits that you control.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these, email hello@mayaa.agency. We will respond within 30 days.
Cookies
The platform uses one essential cookie to keep you signed in. We do not use third-party advertising or tracking cookies on mayaa.agency.
Children
Mayaa is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
Changes
If we change this policy in a way that matters, we will update the date above and notify workspace owners by email before the change takes effect.
Contact
Mayaa Labs, Inc. · hello@mayaa.agency