LegalPrivacy Policy
Data

Privacy Policy

We are committed to protecting your personal data with transparency, security, and respect for your rights under GDPR, CCPA, and applicable privacy law.

Effective Date

March 9, 2026

Last Updated

March 9, 2026

What We Collect

Data Categories

We collect only what is necessary to provide and improve our services. Here is a transparent breakdown.

Identity & Account

  • Full name
  • Email address
  • Profile photo
  • Account type
  • Sign-up date

Usage & Activity

  • Pages visited
  • Features used
  • Session duration
  • Error logs
  • Feature preferences

Technical Data

  • IP address
  • Browser type & version
  • Operating system
  • Time zone
  • Device type

Authentication

  • OAuth provider tokens (hashed)
  • Last login timestamp
  • Multi-factor auth status

Usage

How We Use Your Data

Service Delivery

Authenticate your identity, render your profile, and personalise the platform experience.

Security

Detect and prevent fraud, unauthorised access, and abuse patterns.

Improvement

Aggregate anonymised analytics to identify performance issues and improve features.

Communication

Send transactional emails (account creation, password reset) and optional product updates.

Legal Obligations

Retain records as required by applicable law, taxation, or regulatory bodies.

Sharing & Storage

Who Sees Your Data

Third-Party Processors

We use Google Firebase (Auth, Firestore, Storage) as our primary data processor. Firebase is GDPR-compliant and ISO 27001 certified. No data is sold to advertisers or marketing platforms.

Data Location

Your data is stored on Google Cloud servers. Firebase handles encryption at rest and in transit using TLS and AES-256.

Retention

We retain your personal data for as long as your account is active. Upon deletion, all personally identifiable information is purged within 30 days, except where retention is legally required.

GDPR / CCPA

Your Rights

You have meaningful control over your personal data. We honour all legally protected rights.

Right to Access

You may request a complete copy of all personal data we hold about you at any time.

Right to Rectify

You can correct or update inaccurate information directly through your profile settings.

Right to Erasure

You may permanently delete your account and all associated data from the profile settings page.

Right to Portability

You can request your data in a machine-readable format within 30 days of your request.

Right to Object

You may opt out of non-essential data processing, including marketing communications.

Right to Restrict

You may ask us to pause processing of your data while a complaint or concern is being resolved.

Exercise Your Rights

To access, correct, or delete your data, visit your profile settings. For data portability requests or formal privacy inquiries, contact us at security@maityos.com. We respond to all verified requests within 30 days.

Cookies

Cookie Usage

We use strictly necessary cookies for authentication sessions and optional analytics cookies to understand how users interact with our platform. You may manage cookie preferences through your browser settings.

Read our Cookie Policy

Contact

Data Protection Contact

For any questions about this Privacy Policy, your personal data, or to lodge a complaint with our data protection team:

security@maityos.com