Privacy Policy
Last updated: 26 September 2026
This Privacy Policy explains how myMayz OS ("myMayz", "we", "us") handles personal information across our marketing website at get.mymayz.com and the myMayz OS application that merchants use at os.mymayz.com (together, the "Services").
1. Who this covers
Two groups: visitors to our marketing website, and merchants (and their staff) who connect a store to myMayz OS. Where a merchant uses myMayz to serve their own customers, the merchant is the data controller of their customers' information and myMayz acts as a data processor on the merchant's behalf.
2. Information we collect
- Early-access sign-ups. If you submit the form on get.mymayz.com, we store the email address you provide and basic technical context (referrer, browser type, and the time of submission) so we can invite you when we launch.
- Merchant account data. When you connect a store, we receive your name, email, store domain, plan, and the access tokens needed to sync your store — authorized by you through Shopify.
- Store and customer data. To run support, returns and messaging, myMayz processes order, product and customer records from your connected store, and the content of conversations that pass through connected channels (e.g. WhatsApp, Instagram, Messenger, email).
- Usage and device data. Standard log and analytics data (IP address, device/browser, pages viewed) used to keep the Services secure and reliable.
3. How we use information
- To provide, operate and improve the Services.
- To sync your store, route conversations, process returns, and send campaigns you initiate.
- To communicate with you about your account, security and product updates.
- To protect the Services against fraud, abuse and technical failures.
4. Messaging & WhatsApp
myMayz is a Meta Tech Provider. WhatsApp messages are sent through the merchant's own WhatsApp Business account and are billed to the merchant by Meta directly — myMayz adds no markup. Merchants are responsible for having a lawful basis and the recipient's consent before sending marketing messages, and myMayz honours opt-out ("STOP") requests.
5. Service providers we rely on
We share data only with providers that help us run the Services, under agreements that require them to protect it: Shopify (store platform & billing), Meta / WhatsApp (messaging), Supabase (database & hosting), Vercel and Railway (application hosting), and Resend (transactional email). We do not sell personal information.
6. Data isolation & security
Each merchant's data is isolated at the database level using row-level security, so one workspace cannot read another's data. We use encryption in transit, access controls, and the principle of least privilege. No method of storage or transmission is 100% secure, but we work to protect your information.
7. Retention
We keep personal information for as long as your account is active or as needed to provide the Services, then delete or anonymize it, unless a longer period is required by law. Early-access emails are kept until you ask us to remove them or the waitlist is closed.
8. Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Merchants can also request deletion on behalf of their customers. To exercise a right, contact us at the address below; for data held on a merchant's behalf, we will refer the request to that merchant.
9. Cookies & local storage
Our marketing website stores only small preferences in your browser (such as your chosen theme and language). The application uses cookies strictly necessary to keep you signed in and to operate the Services.
10. International transfers
Our providers may process data in regions outside your own. Where that happens, we rely on appropriate safeguards offered by those providers.
11. Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.
12. Changes
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to merchants.
13. Contact
Questions about this policy or your data? Email support@mymayz.com.