Privacy Policy

Last Updated: February 15, 2026

1. Introduction

Welcome to Maya, a product of Korf Tech LLC, registered in South Carolina ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our AI-powered email management service for content creators.

By using Maya, you agree to the collection and use of information in accordance with this policy.

2. Google API Services User Data Policy

Maya's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, and profile information when you create an account
• Payment Information: Billing details processed securely through our payment provider (we don't store full credit card numbers)
• Communication: Information you provide when contacting our support team

3.2 Gmail Data We Access

With your explicit permission via Google OAuth, we access your Gmail inbox to scan and identify brand collaboration emails. All emails are initially accessed for classification, but non-collaboration emails are not stored or processed beyond initial classification.

• Email Threads: Subject lines, sender information, email bodies, and metadata from your Gmail account
• Purpose: We access your inbox for the purpose of identifying and organizing brand collaboration opportunities
• No Other Gmail Features: We do NOT access your contacts, calendar, Drive files, or other Google services

3.3 Automatically Collected Information

• Usage Data: How you interact with Maya (features used, clicks, time spent)
• Device Information: Browser type, operating system, IP address
• Cookies: Essential cookies for authentication and session management

4. How We Use Your Information

4.1 Primary Service

• Email Classification: Using AI models to categorize emails as brand collaborations (Paid, Gifted) or non-collaboration emails
• Brand Detection: Identifying brand names and collaboration opportunities
• Automation: Setting up automatic follow-ups and reminders
• Organization: Creating a searchable database of your collaboration history

4.2 Service Improvement

• Analyzing usage patterns to improve our AI classification accuracy
• Debugging technical issues and improving performance
• Developing new features based on user behavior

4.3 Communication

• Sending service updates and important notifications
• Responding to support requests
• Sending marketing emails (you can opt out anytime)

5. How We Share Your Information

5.1 Third-Party Service Providers

We share limited data with trusted service providers who help us operate Maya:

• AI Providers (OpenAI, Anthropic): Email subject lines, sender domains, and body text are sent for AI classification. No other email data (attachments, recipients, etc.) is shared. These providers process data under their enterprise API terms, which prohibit using our data to train their models. Data is processed in real-time and not retained by these providers beyond the API request.
• Supabase: Secure database storage for your organized emails
• Vercel: Website and application hosting
• Payment Processor: Stripe for secure payment processing

These providers are contractually obligated to protect your data and only use it for providing services to Maya.

5.2 We DO NOT:

• ❌ Sell your email data to anyone
• ❌ Share your emails with advertisers
• ❌ Use your emails to train AI models for other purposes
• ❌ Read your emails manually (except for debugging with your explicit permission)

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Maya, our users, or others.

6. Data Security

6.1 Security Measures

• Encryption: All data transmitted between your browser and Maya is encrypted using TLS/SSL
• Database Security: Supabase provides enterprise-grade encryption at rest
• Access Controls: Strict internal access controls limit who can view your data

6.2 OAuth Security

We use Google's OAuth 2.0 for Gmail access, which means:

• We never see your Gmail password
• You can revoke Maya's access anytime via your Google Account settings
• Access tokens are securely stored and regularly refreshed

7. Your Privacy Rights

7.1 Access & Control

You have the right to:

• Access: Request a copy of all data we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Revoke Access: Disconnect Maya from Gmail at any time

7.2 How to Exercise Your Rights

Contact us at [email protected] or use the account settings in the Maya dashboard.

7.3 Data Deletion Timeline

• When you delete your account, we delete your data within 30 days
• Backup copies are deleted within 90 days
• Some anonymized analytics may be retained for service improvement

8. Data Retention

• Active Accounts: We retain your data as long as your account is active
• Email Content: We store classification results, metadata (subject lines, sender info, timestamps), and AI-generated summaries. We do not store full email bodies — email content is read from Gmail in real-time when you view a thread
• Inactive Accounts: After 12 months of inactivity, we may delete your data with notice
• Legal Requirements: Some data may be retained longer to comply with legal obligations

9. International Data Transfers

Maya's servers are located in the United States. If you're accessing Maya from outside the US, your data will be transferred to and processed in the United States. We comply with applicable data protection laws for international transfers.

10. Children's Privacy

Maya is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we've collected data from a child, please contact us immediately.

11. Cookies & Tracking

11.1 Essential Cookies

We use cookies necessary for:

• Authentication and session management
• Security and fraud prevention
• Remembering your preferences

11.2 Analytics

We may use analytics services to understand how users interact with Maya. You can opt out of analytics tracking in your account settings.

12. California Privacy Rights (CCPA)

If you're a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your privacy rights

13. European Privacy Rights (GDPR)

If you're in the European Economic Area, you have rights under GDPR including:

• Right to access and receive a copy of your personal data
• Right to rectify inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of Maya after changes become effective means you accept the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

• Email: [email protected]
• Support: [email protected]
• Website: meetmaya.co
• Mailing Address: Korf Tech LLC, 2108 N Main St STE 236, Anderson, SC 29621