Privacy Policy

Who we are

Maiya Intelligence is an independent business operated as a sole proprietorship in Portugal. In this Policy, “Maiya Intelligence”, “we”, “us”, and “our” refer to the operator of the Maiya Intelligence website, client portal, analytics services, automation services, support channels, and related business activities.

We may act as a controller of personal information when we decide why and how data is processed for our own business operations, such as account administration, billing, customer support, marketing, and security. In some service engagements, we may also act as a processor or service provider on behalf of clients.

Personal information we collect

We collect personal information from different sources depending on how you interact with us.

How we use personal information

• Provide, operate, maintain, and improve our website, account system, BI tools, and paid services.
• Create and manage user accounts, authenticate sign-ins, and support Google-based login flows.
• Process payments, send invoices, confirm transactions, manage subscriptions, and keep financial records.
• Respond to enquiries, chatbot requests, reviews, support tickets, and service requests.
• Monitor usage, measure performance, understand product adoption, and improve content, UX, and service quality through analytics and operational reporting.
• Protect against fraud, abuse, unauthorized access, security incidents, spam, and other harmful activity.
• Comply with legal obligations, enforce our agreements, and defend or resolve claims.
• Send service, billing, legal, and account-related communications. We may also send marketing communications where permitted, and you can opt out at any time.

How we share personal information

We do not sell personal information for money. We may share personal information only as reasonably necessary for business operations, legal compliance, or with your direction.

• Infrastructure and hosting providers: to host the site, databases, files, logs, and application services.
• Authentication and identity providers: to support account registration, sign-in, password recovery, and Google authentication.
• Payment providers and accounting tools: to process payments, prevent fraud, issue invoices, reconcile transactions, and support refunds or disputes.
• Analytics, monitoring, and communications vendors: to understand site usage, detect errors, send confirmations, and respond to enquiries.
• Professional advisers and authorities: when needed for tax, accounting, legal, insurance, regulatory, or dispute-handling purposes.
• Business transfers: in connection with a merger, financing, acquisition, restructuring, or sale of all or part of the business, subject to appropriate safeguards.

Where we share information with service providers, we require them to process personal information only for permitted purposes, to protect it appropriately, and to follow applicable contractual or legal restrictions.

Cookies, analytics, and browser signals

We use cookies and similar technologies for essential site functionality, service preferences, analytics, security, and in some cases advertising or conversion measurement. Details are available in our Cookie Policy.

Depending on the page and the services in use, we may use analytics tools, chatbot-related storage, payment session cookies, authentication cookies, and advertising or attribution technologies from third-party providers.

Where required by law, we offer consent choices for non-essential cookies. We also aim to respect recognized browser-based privacy signals, such as Global Privacy Control (GPC) and Do Not Track (DNT), as requests to limit non-essential tracking or targeted advertising where technically supported and legally required.

Security

We use administrative, technical, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, secure vendors, logging, backups, rate limiting, and incident response procedures.

No system is completely secure. You are responsible for keeping your passwords, authentication methods, and devices secure, and for contacting us promptly if you suspect unauthorized access to your account.

Data retention

We keep personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain accounts, comply with tax and accounting obligations, resolve disputes, enforce agreements, and protect the business.

• Account and profile data: generally retained while your account remains active and for a reasonable period after closure.
• Billing and invoice records: retained as required for accounting, tax, and legal compliance.
• Support messages and chatbot records: retained for service continuity, quality control, and security, then deleted or anonymized when no longer needed.
• Analytics and technical logs: retained for limited periods depending on operational need, fraud prevention, and security requirements.

Children's privacy

Our website and services are intended for adults and business users, not children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so we can review and delete it where appropriate.

User choices

• Account information: you may update certain account details through your profile or by contacting us.
• Marketing communications: you may opt out using the unsubscribe link in the message or by contacting us.
• Cookies and advertising: you can manage cookie preferences through our consent tools when available, through browser settings, and through recognized opt-out signals such as GPC where supported.
• Google authentication: you can revoke app permissions from your Google account settings.
• Access, correction, deletion, and objection requests: you may contact us to request these rights, subject to identity verification and applicable law.

Supplemental notice for the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our processing may rely on one or more legal bases, including performance of a contract, compliance with legal obligations, legitimate interests, and your consent where required.

You may have the right to request access, correction, erasure, restriction, portability, and objection to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local supervisory authority.

Because some of our vendors may process data outside your country, cross-border transfers may occur. When required, we rely on appropriate safeguards such as contractual protections or other lawful transfer mechanisms.

Supplemental notice for the United States

Certain U.S. state privacy laws may grant rights to access, correct, delete, or obtain a copy of personal information, or to opt out of targeted advertising, profiling, or certain sharing activities. We do not sell personal information for monetary consideration.

Where applicable law requires recognition of opt-out preference signals, we intend to treat recognized signals such as GPC as requests to opt out of targeted advertising or similar cross-context behavioral advertising activities for the relevant browser or device.

You may exercise privacy requests by using our Contact Us page. We may verify your identity before processing the request. Authorized agents may also contact us where permitted by law.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. When we do, we will post the revised version on this page and update the “Last updated” date. If changes are materially significant, we may provide additional notice where appropriate.