PrivacyPolicy

MAYZAI ("we", "us", "our") builds and operates automation systems for service businesses. This policy explains what we do with personal data collected through mayzai.com and in the course of providing our services.

MAYZAI is based in Bhopal, Madhya Pradesh, India. We are the data fiduciary (controller) for personal data collected through this website, under India’s Digital Personal Data Protection Act 2023. Where we handle personal data of individuals in the UK or the EU on behalf of a client, UK GDPR or EU GDPR may also apply, and we contract on that basis. Where we operate systems on behalf of a client, that client is normally the controller and we act as their processor under a separate written agreement.

For any question about how we handle personal data, or to exercise any of the rights set out below, contact us at hey@mayzai.com or on +91 74890 30252. We aim to acknowledge within one business day.

Information you give us

When you submit the enquiry form we collect your name, company, work email address, industry, an optional phone number, and whatever you write in the message field. We ask for nothing else, and we do not require an account.

Information collected automatically

Our hosting provider records standard server logs, which may include IP address, browser type, referring page and timestamp. These are generated by the infrastructure rather than by us, and are used for security and diagnostics.

What we do not collect

• We do not collect special category data (health, biometrics, political opinions and similar).
• We do not knowingly collect data from anyone under 18.
• We do not buy contact lists or enrich your details from third-party data brokers.

We only use personal data where we have a proper basis for doing so. Ours are as follows.

• Responding to your enquiry — legitimate interests, namely replying to someone who has asked us to get in touch.
• Providing services under a contract — performance of a contract with you or your organisation.
• Keeping the site secure and available — legitimate interests in preventing abuse and diagnosing faults.
• Meeting legal and accounting obligations — compliance with a legal obligation.

We do not use your details for marketing sequences, newsletters or automated profiling. If we ever wanted to, we would ask for your consent first, and you could withdraw it at any time.

We do not sell personal data. We share it only with service providers who help us operate, and only to the extent they need it. Each is bound by a written agreement requiring appropriate security.

• Website hosting, which processes standard server logs.
• Email providers, through which enquiries and our replies pass.
• Where we operate systems for a client, the platforms that client already uses — their telephony, CRM and calendar providers.

We will name the specific providers involved in your case on request. We may also disclose personal data where we are legally required to do so, or to establish, exercise or defend legal claims.

We operate from India and work with clients internationally. Some of our service providers — hosting and email in particular — process data outside India, and where we work with clients abroad their data may be processed in their own country.

Where personal data crosses a border we put appropriate contractual safeguards in place, and where a client is subject to UK or EU GDPR we contract on terms that meet those requirements. You can ask us for details of the safeguards applying to any particular transfer.

We keep personal data only for as long as there is a reason to.

• Enquiries that do not lead to work: up to 12 months from our last exchange, then deleted.
• Client records: for the duration of the engagement, and afterwards for as long as tax, accounting or limitation periods require.
• Call recordings and transcripts handled on a client’s behalf: for the period agreed in that client’s contract, and returned or deleted when it ends.
• Server logs: a short rolling window, as retained by our hosting provider.

After that, data is deleted or irreversibly anonymised.

You have the following rights over your personal data. They are free to exercise, and we will respond within 30 days.

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where there is no continuing reason to keep it.
• Restriction — ask us to pause processing while a concern is resolved.
• Objection — object to processing carried out on the basis of legitimate interests.
• Portability — receive certain data in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these, email hey@mayzai.com or call +91 74890 30252. If you are not satisfied with how we have handled your data, you may raise a grievance with the Data Protection Board of India, or with your own supervisory authority if you are outside India — though we would appreciate the chance to put things right first.

This website does not set advertising or tracking cookies, and it does not use third-party analytics that profile you across sites.

If we later introduce analytics or any non-essential cookie, we will ask for your consent before it is set and update this policy. Our Cookie Policy sets out the current position in full.

The site is served over HTTPS. We apply access controls, keep dependencies patched, and limit who within our team can reach personal data to those who need it.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected individuals as required by law, and without undue delay.

We may update this policy as our services or obligations change. The date at the top of this page always reflects the current version. Material changes will be flagged on this page before they take effect.