Who we are
MAIA Intelligence (“MAIA,” “we,” “us”) is incorporated in Ontario, Canada and operates the product and website at maiaintelligence.io. For privacy questions, contact privacy@maiaintelligence.io.
Two roles, two scopes
This policy covers how MAIA processes personal information. We act in two distinct capacities, and your rights depend on which one applies.
- Data controller, marketing site and prospect interactions. When you visit our website, request a briefing, sign up for newsletters, apply to a role, or contact us, we are the controller of the personal information you share.
- Data processor, customer deployments. When MAIA processes data on behalf of a customer through our platform, the customer is the controller and we are the processor. That processing is governed by our Data Processing Addendum, not this policy. See the DPA.
What we collect (controller scope)
| Category | Examples | Why |
|---|---|---|
| Identity and contact | Name, work email, company, role, phone if you give it | Respond to inquiries, schedule demos, deliver newsletters |
| Browser and device | IP address, browser, OS, referrer, viewport, page path | Operate the site, prevent abuse, understand which content works |
| Form submissions | Briefing requests, careers applications, newsletter signups | Reply to you, evaluate fit, send what you asked for |
| Account data (if you have one) | Login email, hashed password, role, preferences | Authenticate you and run the product |
| Cookies (limited) | Session, CSRF, preferences, analytics where consented | Keep you signed in and measure aggregate site performance |
What we do not collect
- We do not buy personal information from data brokers.
- We do not run third-party advertising trackers on the site.
- We do not sell or share personal information for cross-context behavioural advertising (CCPA § 1798.140(ah)).
Legal bases (GDPR, UK GDPR)
- Contract, when you sign up for a service or engagement.
- Legitimate interests, when we run the website, prevent fraud, secure infrastructure, and reach out to enterprise prospects in our ICP.
- Consent, for marketing emails, analytics cookies, and any optional features. Withdrawable at any time.
- Legal obligation, when required to retain records for tax, audit, or law enforcement requests.
How long we keep things
- Newsletter, until you unsubscribe.
- Briefing and contact forms, two years from last interaction, then deleted unless converted to a customer record.
- Career applications, twelve months, then deleted.
- Customer account data, the term of the contract plus retention required by the DPA.
- Server access logs, ninety days.
Who we share with
We share with vetted subprocessors who help us run the service, all bound by written confidentiality and data protection terms. The list is published and kept current at /subprocessors. We will share with law enforcement only when legally compelled and only the minimum necessary.
International transfers
MAIA is based in Canada. We use providers in Canada, the United States, and the EU. For transfers out of the EEA, UK, or Switzerland we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary measures (encryption in transit and at rest, access controls, audit logs).
Your rights
You can exercise the following at any time, free of charge.
- Access a copy of your data.
- Correct inaccurate data.
- Delete your data, subject to limited legal exceptions.
- Export your data in a portable format.
- Object to or restrict processing based on legitimate interests.
- Withdraw consent.
- Lodge a complaint with your supervisory authority. In Canada, the Office of the Privacy Commissioner. In the EU, your local DPA. In the UK, the ICO. In California, the Attorney General.
Email privacy@maiaintelligence.io and we will respond within thirty days.
Children
MAIA is a B2B platform. We do not knowingly collect data from children under sixteen and we do not market to them.
Changes
We post changes here and update the “Last updated” date. If a change is material we will notify active customers and newsletter subscribers by email.