Privacy Policy

1. Who is responsible for your data

Maisa AI Capital SL, Plaza Enrique Granados 3 12, València, Spain, operates the research service described on this website and acts as the data controller for the personal data described below. Data protection questions can be sent to [email protected] or +34 963 52 16 34.

2. What we collect

• Account data: first name, last name, email address and the password hash created at checkout.
• Order data: credit amount, package name, currency, promo code used, payment method and payment status.
• Research data: the queries you submit, the sources returned, and the sessions, saved items and collections you create.
• Technical data: IP address, browser and device type, and error diagnostics needed to keep the service working.

3. Why we process it

• To create and operate your account and to deliver the credits you purchased.
• To process payments and keep the accounting records the law requires.
• To run searches and produce answers, which requires sending your query to search and language model providers.
• To detect abuse, prevent fraud and protect the service, on the basis of our legitimate interest.

4. Legal bases

We rely on the performance of a contract for account and credit handling, on a legal obligation for invoices and tax records, on legitimate interest for security and service improvement, and on your consent for optional analytics cookies.

5. Sharing with processors

We share the minimum necessary data with hosting, search, language model, email and payment providers acting as processors under written agreements. We do not sell personal data, and we do not use your research content for advertising.

6. International transfers

Where a processor operates outside the European Economic Area, transfers are covered by the European Commission's standard contractual clauses together with additional technical safeguards such as encryption in transit and at rest.

7. Retention

• Account data is kept while the account exists and for 30 days after deletion.
• Payment and invoice records are kept for the statutory retention period, normally ten years.
• Research sessions, saved items and collections are kept until you delete them or close the account.
• Technical logs are kept for up to 90 days.

8. Your rights

You can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. You can also withdraw cookie consent at any time. Write to [email protected] and we respond within 30 days. You may also complain to your national supervisory authority.

9. Security

Passwords are stored hashed, traffic is encrypted with TLS, and access to production data is limited to staff who need it. No system is perfectly secure, so we also keep audit logs and notify affected users of any breach that presents a risk to their rights.

10. Children

Maisa AI is not intended for people under 16. We do not knowingly create accounts for children, and we delete such accounts when we become aware of them.

11. Changes

When this policy changes materially we email account holders and update the date at the top of this page before the change takes effect.