Maia Platform navigation data – Cookies 

While you browse and interact with the Maia Platform, the Company collects certain navigation and technical data through cookies and similar technologies, in accordance with our Cookie Policy and, where required by applicable law, based on your choices and/or consent. Such data may include: 

1. ​​​​​technical information including: IP address, device identifiers, operating system, browser type and settings; 
2. information on your interaction with the Platform: URL of pages browsed and the activities carried out on these pages, date and time of access, duration of access and clickstream. 

We collect and use this information to ensure the proper functioning, management, maintenance and security of the Maia Platform, to provide you with a safe experience, and to prevent, detect and investigate security incidents, fraud or unauthorised access. We may also analyse such data, including in aggregated form, to produce statistics on the performance and usage of the Maia Platform.  

Furthermore, where you enable optional cookies and similar technologies (where required by applicable law, based on your choices and/or consent), we may process certain navigation and interaction data to personalise and improve your experience within the Platform, for example by tailoring content, suggestions, features and service interactions to your preferences. 

You are completely free to provide your navigation data; however, refusing strictly necessary cookies may make access to the Platform or certain functionalities unavailable. 

We will store these data as long as they are necessary for the purpose for which they are collected. Navigation data are collected with the use of cookies. You can manage your cookie preferences at any time as described in our Cookie Policy available at https://mymaia.ai/privacy 

Data provided by creating a user account 

When you complete the registration form on the Maia Platform to create your account and, subsequently, by using our services, you will provide us with the following data: name and surname, e-mail address and country and, where applicable, postal address and tax identification details for invoicing purposes. You may also provide optional profile information, such as a profile picture, gender and interests.
By creating your profile, we will consider you a user of Maia Web App and a member of the relevant community. 

Data relating to the use of the Service, Maia Credits and transactions  

When you use the Platform, we process technical logs and usage data (e.g., access logs, device/browser identifiers, security events, crash/malfunction information) and data relating to your use of Maia Credits and transactions performed on the Platform. This may include transaction history, technical and accounting records, transaction identifiers, and information needed to handle disputes, refunds, reversals or equivalent remedies, where applicable. 

Data that you provide when you query Maia Web App to search the web or your calendar (if synchronized)  

Whenever you conduct specific searches you may share personal data, which may be common data (including photos and videos), as well as special categories of personal data under article 9 of GDPR (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation).  

There is a possibility that such data will also be processed, or even more so if the user activates synchronization of its calendar. In this case, synchronization of your calendar do not allow plain-text access to all related content, only if and when a certain search is made within the calendar, the AI system will be able to recognize within the content of the calendar the information entered by the user in the search input for the purpose of providing the results, through the mechanism of so-called embeddings. Embeddings are the result of an AI algorithm that extracts the “semantic meaning” from the input, translating it into a sequence of numbers. The sequence of numbers of the embeddings is not decipherable, as the original content cannot be reconstructed from the digit. 

In conclusion, the search/extraction of content from the database made of calendar occurs on content that is “encrypted” indirectly: what happens is that the different AI modules, based on the type of query made by the user, extract from the calendar the main information/concepts/keywords to enable the performance of the research-service. 

To ascertain that the calendar you want to synchronize belongs to you, you will be sent a request for verification using strong authentication mechanisms. 

If you subscribe for the Maia Web App, you agree to share such data with the Company, as they are necessary to the Company itself to provide you Maia Web App’s services: sharing such data with our Company remains your sole responsibility. Maia Web App does not originate nor it is designed for the processing, elaboration or storage of data relating to criminal convictions and offenses; therefore, the user is prohibited from sharing such data through the use of the services. 

Data provided by the user when it archives its own files, documents and images or when it creates or shares multimedia content with third parties through MAIA Web App’s content generation or content sharing services 

When you upload files, documents, or images to your Maia Web App archive or when you create or edit digital content made through the ACTION service, the Maia Studio service and other content generation or content sharing services of Maia Web App, you may also share personal data, which may be common data (including photos and videos), as well as special categories of personal data under Article 9 of the GDPR. 

Maia Web App does not originate nor it is designed for the processing, elaboration or storage of data relating to criminal convictions and offenses; therefore, the user is prohibited from sharing such data through the use of the services. 

Data about your interests, habits, and preferences 

Through the analysis of your data filled in the registration form, as well as your online behaviour, including your researches via the Maia Web App, and, to the extent explained in the paragraphs above, the contents of your calendar, if synchronized with the Maia Web App, as well as in the use of the various Maia Web App services, we will analyse your habits and preferences in order to provide you the services, i.e. targeted search results and accurate, relevant, and personalized feedback that reflect your interests and preferences.  

The data relating to criminal convictions and offences under article 10 of GDPR are not subject to profiling activity, that the user, despite the prohibition, should share using Maia Web App, as well as all data that are not specifically indicated in the fields (shown as “nodes”) that you find within your Personal Profile Graph in the Maia Web App, which will be immediately deleted. 

You may update your interests and preferences anytime, giving your specific feeds to content that is shown to you by Maia Web App when it provides results to your searches or through the Personal Profile Graph. As the latter, it is possible to add and delete items of interest (entered by the user or tracked by Maia Web App) that are in the “nodes” within the Personal Profile Graph, as well as the entire field/“node” (e.g., if you no longer wish to be profiled with respect to the “family” field, you can delete/deactivate the entire “node” of the Personal Profile Graph). 

The Company will use such data ​​​​also to produce analytical reports of aggregated data which we then use for statistical purposes and, upon your consent, for Company’s marketing purposes. Advertising could be submitted to you either through the app or through other channels. 

Localization data 

The Company may collect information about your localization if you activate it when you use Maia Web App services, which helps us offer features such as search results or news related to local information. 

Your location can be determined with varying degrees of accuracy, via: GPS and other data from your device’s sensors 

IP address, activity on the browsers you usually use (such as your searches and the places you label as home or work), information about what is nearby your device, such as Wi-Fi access points. 

The types of location data we collect and how long we store it depends on the settings on the browser you use. 

Data provided when you contact us 

When you contact us for support, provide feedback, submit notices/reports or complaints, or otherwise interact with moderation and compliance procedures, we process the personal data you choose to share to handle your request and communicate the outcome. Depending on the case, this may include your contact details, the content of your request/report, identifiers of the reported Output/content (e.g., link, content ID, date/time), the reason for the report, and any evidence or attachments.​​ 

Third-party data 

When you use the Service, you may upload or otherwise make available content that may include personal data relating to third parties (e.g., images or other materials). You are responsible for ensuring that you have the right to share such content and that you comply with applicable law and the prohibitions set out in the Terms and Conditions (including restrictions relating to minors and unlawful content). The Company processes such third-party personal data only to provide the Service, ensure security and integrity of the Platform, and comply with applicable legal obligations (including handling notices/reports and moderation actions). We do not use such third-party data for marketing purposes. 

Purpose of data processing  

Legal basis for processing personal data 

​​​​​Data retention period 

Ensure platform operation, reliability and troubleshooting (including technical logs and diagnostics) 

Legitimate interest under article 6 par. 1 lett. f) of GDPR 

Personal data are retained for the period strictly necessary to ensure the proper functioning, stability and security of the Platform, based on objective criteria such as system integrity requirements, incident detection needs and operational continuity. Where necessary, data may be retained for a longer period to investigate security incidents, prevent fraud or abuse, or to establish, exercise or defend legal claims. 

Ensure security, prevent fraud/abuse and unauthorised access, and protect the integrity of the Platform 

Legitimate interest under article 6 par. 1 lett. f) of GDPR 

Personal data are retained for as long as necessary to safeguard the security and integrity of the Platform. Retention may be extended where required to detect, investigate or remediate security incidents, comply with legal obligations, or establish, exercise or defend legal claims. 

Create, activate and manage the user account; provide access to the Services; manage authentication and account settings 

Performance of the service required by users under article 6 par. 1 lett. b) of GDPR 

Personal data are retained for the duration of the contractual relationship and, thereafter, for the period necessary to comply with applicable legal obligations and/or to establish, exercise or defend legal claims, based on applicable limitation periods and regulatory requirements. 

Provide customer support and handle user requests submitted via the Platform (including support tickets and related communications) 

Performance of the service required by users under article 6 par. 1 lett. b) of GDPR 

For the period necessary to respond to your request and to document its handling, with the possibility to retain relevant records for longer where necessary to comply with a legal obligation or to establish, exercise or defend the Company’s rights before a judicial, administrative or other authority. 

Manage the administration and accounting related to the purchase of the subscription account properly, as well as issue and submit to user a receipt of purchase (or an invoice if required) of the Maia Web App account and relevant services, including sending messages to the user regarding the status of the transaction requested by the user 

Compliance with a legal obligation under article 6 par. 1 lett. c) of GDPR and, where applicable, performance of the service required by users under article 6 par. 1 lett. b) of GDPR. 

Personal data are retained in accordance with applicable accounting and tax legislation in the relevant jurisdiction and, where necessary, for the period required to establish, exercise or defend legal claims. 

Provide the user with personalized search results via the Maia Web App  

For common data, performance of the service required by users under article 6 par. 1 lett. b) of GDPR. 

For special categories of data, specific consent which may be given and withdrawn at any time under article 9 par. 2 lett. a) of GDPR 

​​​ 

Personal data are retained for the duration of the user’s subscription and for as long as necessary to ensure continuity of the service, manage contractual obligations and comply with applicable legal requirements. 

Following termination of the subscription, data are retained only for the period necessary to comply with legal obligations and/or to establish, exercise or defend legal claims, based on applicable statutory limitation periods. 

Provide the user with targeted searches in the user’s real-time location area and provide feeds related to the user’s places of interest (Localization) 

Specific consent which may be withdrawn at any time under article 6 par. 1 lett. a) of GDPR 

​​​​​Personal data processed on the basis of consent (including localisation data) are retained for as long as consent remains valid and has not been withdrawn. 

Location-related data are subject to periodic review and are deleted, anonymised or deactivated when no longer necessary for the purposes for which they were collected or upon withdrawal of consent, subject to compliance with applicable legal obligations. 

Provide the service of summarizing voice messages and texts uploaded by the user   

For common data, performance of the service required by users ​​​​under article 6 par. 1 lett. b) of GDPR. 

For special categories of data, specific consent which may be given and withdrawn at any time under article 9 par. 2 lett. a) of GDPR 

Voice messages and uploaded texts are processed for the time strictly necessary to generate the requested summary and are deleted or irreversibly anonymised once the processing purpose has been fulfilled, unless further retention is required by applicable law or to establish, exercise or defend legal claims. 

Summaries generated by the Service are retained for as long as necessary to provide the functionality requested by the user and ensure continuity of access within the account, subject to user deletion and applicable legal obligations. 

Provide content generation or content sharing services 

For common data, performance of the service required by users ​​​​under article 6 par. 1 lett. b) of GDPR. 

For special categories of data, specific consent which may be given and withdrawn at any time under article 9 par. 2 lett. a) of GDPR 

Personal data relating to generated or shared content are retained for the duration of the user’s subscription and/or for as long as the relevant content remains stored or accessible within the user’s account or shared environment. 

Following termination, data may be retained only to comply with legal obligations and/or to establish, exercise or defend legal claims, based on applicable statutory limitation periods. 

Provide you with personalized search results and feeds that match your interests and preferences, on the basis of the analysis of your interests and preferences  

For common data, performance of the service required by users under article 6 par. 1 lett. b) of GDPR. 

For special categories of data, specific consent which may be given and withdrawn at any time under article 9 par. 2 lett. a) of GDPR 

Personal data used to personalise searches and feeds are retained for the duration of the subscription and for as long as necessary to ensure proper service functionality.  

Upon subscription termination or deletion of search history by the user, data are deleted or anonymised, unless retention is required to comply with legal obligations or to establish, exercise or defend legal claims. 

Allow users to keep track of their research and conversations undertaken through Maia Web App 

Performance of the service required by users under article 6 par. 1 lett. b) of GDPR 

Search history and conversation data are retained for the duration of the user’s subscription and for as long as the functionality remains active within the account. 

Data are deleted or anonymised upon permanent deletion by the user or termination of the subscription, subject to applicable legal obligations and/or the need to establish, exercise or defend legal claims. 

Handle notices, reports, complaints and moderation/enforcement actions related to Content and Outputs (restriction/removal decisions, account measures), and comply with lawful orders/requests from authorities. 

Compliance with a legal obligation under article 6 par. 1 lett. c) of GDPR, where applicable, and legitimate interest under article 6 par. 1 lett. f) of GDPR (e.g., to ensure the security and integrity of the Platform, prevent abuse and protect the rights of the Company and third parties). 

Personal data are retained for the period necessary to assess and manage the notice/report/complaint and communicate the outcome, and thereafter for as long as necessary to comply with legal obligations and/or to establish, exercise or defend legal claims. 

Establish, exercise or defend legal claims; enforce the Terms; manage disputes beyond transaction-level issues (including audits and investigations where appropriate) 

Legitimate interest under article 6 par. 1 lett. f) of GDPR. 

Personal data are retained for the duration of the relevant claim, dispute, audit or investigation and, thereafter, for the applicable statutory limitation period under relevant law, unless a longer retention is required by legal obligations. 

Provide advertising materials through Maia Web App 

Specific consent which may be withdrawn at any time under article 6 par. 1 lett. a) of GDPR 

Personal data processed for advertising purposes are retained for as long as consent remains valid and effective. Upon withdrawal of consent, the data will no longer be used for such purposes and will be deleted or anonymised in accordance with internal retention criteria and applicable legal obligations. 

Provide you targeted advertising concerning other services of the Company  

Specific consent which may be withdrawn at any time under article 6 par. 1 lett. a) of GDPR 

Personal data processed for targeted advertising are retained for as long as consent remains valid and have not been withdrawn, subject to periodic internal review of relevance and lawfulness, and to compliance with applicable legal obligations. 

Upon expiry of the applicable retention criteria described above, personal data are deleted, anonymised or securely archived in accordance with documented internal retention and deletion procedures. Account deletion requests are handled in accordance with the same principles, subject to legal obligations requiring longer retention. 

Your personal data may be disclosed to and processed by the following categories of recipients: 

A) Independent data controllers (where applicable):  

● competent public authorities, supervisory authorities and law enforcement agencies; 
● professional advisers (e.g., legal counsel, accountants, auditors) acting as independent data controllers, where necessary for compliance with legal obligations and/or to establish, exercise or defend legal claims; 
● third parties involved in extraordinary transactions (e.g., mergers and acquisitions, corporate reorganisations, transfer of assets), to the extent permitted by applicable law and subject to appropriate safeguards. 

B) Data processors (service providers acting on our behalf) 

Your personal data may also be processed on our behalf by selected service providers acting as data processors, subject to contractual safeguards and appropriate instructions. These may include, as applicable: 

● hosting and cloud infrastructure providers; 

● IT maintenance and technical support providers; 

● customer support/ticketing and email communication providers; 

● payment service providers and, where applicable, verification/KYC and fraud-prevention service providers; 

● analytics and security service providers, where enabled and in accordance with applicable law. 

The updated list containing the data processors is available by sending a written communication to the data controller or an e-mail to [email protected] 

My Aion Inc. is established in the United States.  

Personal data may therefore be processed in the United States and, where necessary for the provision of the Service, technical maintenance, or business operations, in other countries as well. 

Where personal data of individuals located in the European Economic Area (“EEA”) or the United Kingdom is transferred to a country that has not been recognized as providing an adequate level of protection, the Company implements appropriate safeguards in accordance with applicable data protection laws, including, where applicable, the execution of Standard Contractual Clauses or equivalent transfer mechanisms pursuant to Articles 46 et seq. of the GDPR and corresponding UK legislation. 

Evidence of the safeguard measures taken by the Company can be obtained by sending an e-mail to [email protected] 

If you resident in the United States, the processing of your personal data may also be subject to applicable U.S. federal and state privacy laws, including, where relevant, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other comparable state regulations. Additional disclosures and rights applicable to U.S. residents are described in the relevant sections of this Notice. 

If you resident in jurisdictions outside the European Union, the United Kingdom, or the United States, your personal data will be processed in accordance with applicable local laws and, where required, subject to appropriate safeguards for international data transfers. 

You can obtain access to your personal data and relevant copy, as well as their erasure, the rectification of inaccurate or incomplete data, or the limitation of the processing of your personal data according to Article 18 of GDPR; 

You also have the right to object to the processing of your personal data at any time in relation to your particular situation. Right to object to the processing of personal data for direct marketing purposes is absolute and can be exercised at any time (Article 21 of GDPR). 

If the processing of your personal data is based on consent, you have the right to withdraw your consent at any time (Article 7 of GDPR). 

If the conditions for the right to data portability under Article 20 of the GDPR are met, you have the right to receive in a structured format, commonly used and readable by automatic device the personal data you provided us and, where technically feasible, to the secure transmission of your personal data to another data controller.  

In order to protect your rights and your personal data, anytime, you may decide to file a complaint to the competent supervisory authority (in particular, in the EU State where you usually reside or work or in the State where any alleged violation of your data has been committed). 

You can exercise your rights by writing to the Data Controller by mail at the address indicated above or by e-mail at the following address: [email protected]. 

It is understood that, where your request is made by electronic means, the information will be provided in a commonly used electronic format.