Legal

Privacy Policy

Last updated: 26 September 2026

This Privacy Policy explains how myMayz OS ("myMayz", "we", "us") handles personal information across our marketing website at get.mymayz.com and the myMayz OS application that merchants use at os.mymayz.com (together, the "Services").

1. Who this covers

Two groups: visitors to our marketing website, and merchants (and their staff) who connect a store to myMayz OS. Where a merchant uses myMayz to serve their own customers, the merchant is the data controller of their customers' information and myMayz acts as a data processor on the merchant's behalf.

2. Information we collect

3. How we use information

4. Messaging & WhatsApp

myMayz is a Meta Tech Provider. WhatsApp messages are sent through the merchant's own WhatsApp Business account and are billed to the merchant by Meta directly — myMayz adds no markup. Merchants are responsible for having a lawful basis and the recipient's consent before sending marketing messages, and myMayz honours opt-out ("STOP") requests.

5. Service providers we rely on

We share data only with providers that help us run the Services, under agreements that require them to protect it: Shopify (store platform & billing), Meta / WhatsApp (messaging), Supabase (database & hosting), Vercel and Railway (application hosting), and Resend (transactional email). We do not sell personal information.

6. Data isolation & security

Each merchant's data is isolated at the database level using row-level security, so one workspace cannot read another's data. We use encryption in transit, access controls, and the principle of least privilege. No method of storage or transmission is 100% secure, but we work to protect your information.

7. Retention

We keep personal information for as long as your account is active or as needed to provide the Services, then delete or anonymize it, unless a longer period is required by law. Early-access emails are kept until you ask us to remove them or the waitlist is closed.

8. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. Merchants can also request deletion on behalf of their customers. To exercise a right, contact us at the address below; for data held on a merchant's behalf, we will refer the request to that merchant.

9. Cookies & local storage

Our marketing website stores only small preferences in your browser (such as your chosen theme and language). The application uses cookies strictly necessary to keep you signed in and to operate the Services.

10. International transfers

Our providers may process data in regions outside your own. Where that happens, we rely on appropriate safeguards offered by those providers.

11. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.

12. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to merchants.

13. Contact

Questions about this policy or your data? Email support@mymayz.com.

This document is provided in good faith to describe our practices and will be finalized with legal review before general availability.