Maveon
← Back to Maveon
Legal

Privacy Policy

Effective Date: April 1, 2026  ·  Jurisdiction: British Columbia, Canada  ·  Compliance: PIPEDA · GDPR-aware

1. Who We Are and Scope of This Policy

1.1 Maveon AI (“Maveon,” “we,” “us,” or “our”) operates the Maveon platform located at maveon.ai. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Service.

1.2 This Policy applies to: (a) Clients — businesses and individuals who register for and use the Maveon platform; and (b) Website Visitors — individuals who visit maveon.ai without registering. It does not directly govern the personal information of End Users who interact with Chatbots deployed by Clients — that processing is governed by the Client’s own privacy policy. See Section 8 for how Maveon processes End User data as a data processor on behalf of Clients.

1.3 Maveon is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially equivalent provincial legislation. Where we process personal data of individuals located in the European Economic Area or United Kingdom, we comply with the GDPR as a matter of operational policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Registration: Name (if provided), email address, password (hashed), billing information processed by Stripe.
  • Profile and Settings: Company name, plan preference, communication preferences.
  • Client Content: Documents, URLs, and text uploaded to train Chatbots. This content may contain personal information about third parties; Clients are responsible for ensuring appropriate authority to upload such content.
  • Communications: Information you provide when contacting support, submitting feedback, or completing contact forms.

2.2 Information Collected Automatically

  • Usage Data: Pages viewed, features accessed, Chatbot configurations created, conversation counts, and interaction timestamps.
  • Technical Data: IP address, browser type, operating system, device identifiers, referring URL, and session duration.
  • Cookies and Tracking Technologies: As described in our Cookie Policy.

2.3 Information from Third Parties

  • Google OAuth: If you choose to register or log in using Google, we receive your email address and Google profile identifier. We do not receive your Google password.
  • Stripe: We receive transaction confirmations and subscription status from Stripe. We do not store full payment card numbers.

3. How We Use Personal Information

PurposeLegal Basis (PIPEDA / GDPR)
Providing and maintaining the Service, including account authenticationContractual necessity / consent
Processing subscription payments and managing billingContractual necessity
Sending transactional emails (account creation, password reset, invoices)Contractual necessity
Responding to support requests and inquiriesLegitimate interest / consent
Sending service updates or changes to these policiesLegitimate interest
Detecting and preventing fraud, abuse, and security threatsLegitimate interest
Analyzing aggregate usage to improve the ServiceLegitimate interest
Complying with legal obligationsLegal obligation
Marketing communications (only with explicit opt-in)Consent

3.1 Maveon does not sell personal information to third parties. Maveon does not use Client Content or End User conversation data to train shared AI models.

4. Disclosure of Personal Information

4.1 We may share personal information with the following categories of recipients:

  • AI Infrastructure Providers: Anthropic (Claude), OpenAI, and Google LLC process prompts and generate responses as part of the Service. These providers receive content submitted to Chatbots and are subject to their own privacy commitments.
  • Payment Processor: Stripe, Inc. processes payment card data on our behalf. Stripe is PCI-DSS compliant.
  • Cloud Infrastructure: Railway (hosting and deployment infrastructure).
  • Analytics Services: We may use privacy-respecting analytics tools to understand aggregate Service usage.
  • Legal and Regulatory Authorities: We may disclose personal information where required by law, court order, or to protect the rights, property, or safety of Maveon, its clients, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to equivalent privacy protections.

4.2 We do not share personal information with advertisers or data brokers.

5. Cross-Border Data Transfers

5.1 Maveon operates from Canada. Third-party service providers (including Anthropic, OpenAI, Google, and Stripe) are primarily located in the United States. By using the Service, you consent to the transfer of your personal information to the United States and other jurisdictions where these providers operate.

5.2 For individuals in the European Economic Area or United Kingdom, transfers to third parties in non-adequate countries are made subject to appropriate safeguards, including Standard Contractual Clauses where required under GDPR Article 46.

5.3 Maveon takes reasonable contractual and technical measures to ensure that personal information transferred to third parties receives a level of protection consistent with PIPEDA and, where applicable, GDPR standards.

6. Data Retention

6.1 We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:

  • Account Data: Retained for the duration of the account plus 90 days following account closure.
  • Conversation and Chat Logs: Retained for up to 12 months from the date of the conversation, then deleted or anonymized unless a Client requests earlier deletion.
  • Billing Records: Retained for a minimum of 7 years as required by Canadian tax and accounting law.
  • Support Communications: Retained for 3 years following resolution.

7. Your Privacy Rights

7.1 Subject to applicable law, you have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to legal retention obligations.
  • Data Portability: (GDPR) Request your personal information in a structured, machine-readable format.
  • Withdrawal of Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.
  • Objection: (GDPR) Object to processing based on legitimate interests.
  • Restriction: (GDPR) Request restriction of processing in certain circumstances.

7.2 To exercise any of these rights, contact us at contact@maveon.ai. We will respond within 30 days. We may request identity verification before processing requests.

7.3 If you are located in Canada, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada. If located in the EEA or UK, you may complain to the relevant national data protection authority.

8. End User Data — Maveon as Data Processor

8.1 When a Client deploys a Chatbot on their website, end users may submit personal information through the Chatbot interface (e.g., names, email addresses, questions). In this context:

  • The Client is the data controller — they determine the purposes and means of processing end-user data.
  • Maveon is the data processor — we process end-user data solely on the Client’s instructions to provide the Service.

8.2 Clients are responsible for obtaining all necessary consents from their end users, providing end users with an appropriate privacy notice, and ensuring lawful basis for the processing of personal information through their Chatbots.

8.3 Maveon will process End User data only as necessary to provide the Service and in accordance with any applicable Data Processing Addendum (DPA) executed between Maveon and the Client.

9. Security

9.1 Maveon implements reasonable and appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), hashed credential storage, and access controls.

9.2 No method of transmission over the internet or electronic storage is 100% secure. Maveon cannot guarantee absolute security and is not liable for unauthorized access resulting from factors outside its reasonable control.

9.3 In the event of a data breach that poses a real risk of significant harm, Maveon will notify affected individuals and the Office of the Privacy Commissioner as required under applicable law.

10. Children’s Privacy

10.1 The Service is not directed to individuals under 18 years of age. Maveon does not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor, we will take steps to delete it promptly.

11. Changes to This Policy

11.1 We may update this Privacy Policy from time to time. Material changes will be communicated by email or by prominent notice within the Service at least 14 days before they take effect. The date of the most recent revision is shown in the Effective Date above.

12. Contact

For privacy-related inquiries, access requests, or complaints, contact our Privacy Officer at: contact@maveon.ai
Maveon AI, British Columbia, Canada.

© 2026 Maveon AI. All rights reserved.
Terms of Service Acceptable Use AI Disclaimer Cookie Policy DPA