Privacy Policy
How maaya.works collects, uses, and protects your information — your data stays in India (ap-south-1), and we never sell it.
Last updated: June 2026
Who we are
maaya.works is operated by Maaya Software Solutions Pvt Ltd, based in Chennai, India. This policy explains what personal data we collect when you use our website and product, why we collect it, and the choices you have.
What we collect
Account information you give us — such as your name, email, phone number, and business details when you sign up or contact us.
Content you create in the product — your books, invoices, documents, and the rules and tone you train your AI-hires on. This is your data; you own it.
Usage and device information — pages visited, features used, approximate location from your IP, browser and device type — collected through analytics to improve the product. See our Cookies Policy for details.
How we use your information
To provide and operate the service, process your requests, and let your AI-hires draft work for your approval.
To communicate with you about your account, security, and product updates you have asked to receive.
To measure and improve performance, reliability, and the experience of the site and product.
Legal bases
We process personal data under the Digital Personal Data Protection Act, 2023 (India). Where you are in a region covered by the GDPR or similar laws, we rely on your consent, the performance of our contract with you, and our legitimate interests in running and improving the service.
Where your data lives
Customer data is hosted in India, in the AWS ap-south-1 region. We do not move your business records out of India in the normal course of providing the service.
Sharing and sub-processors
We do not sell your personal data, and we do not use it for cross-site advertising.
We share data only with service providers who help us run the product — such as cloud hosting (Amazon Web Services), analytics (Google Analytics), and communications and payment providers — under contracts that require them to protect it. A current list of sub-processors is available on request and in our Data Processing Addendum.
We may disclose information if required by law, to protect our rights, or as part of a merger or acquisition, in which case we will let you know.
Your rights
You can ask to access, correct, update, or delete your personal data, and you can withdraw consent where processing is based on it. To exercise these rights, contact us using the details below.
Under the DPDP Act, you may also nominate another person to exercise your rights and may raise grievances with our Grievance Officer (contact below) before approaching the Data Protection Board.
Retention
We keep your data for as long as your account is active and as needed to provide the service, comply with legal and tax obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
Children
The service is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new effective date, and where appropriate we will notify you directly.
Contact us
Questions or requests about your data, or to reach our Grievance Officer, email privacy@maaya.works or use our contact page. We aim to respond within the timelines required by applicable law.