We also do not share personal information for cross-context behavioral advertising.
1. Scope
This Privacy Policy applies to Maaya websites, applications, and related services that link to this policy. “Maaya,” “we,” “us,” and “our” refer to the Maaya service operated by GuhaKrish LLC.
Event organizers may use Maaya to collect information from guests, attendees, collaborators, vendors, artists, and ticket buyers. In those situations, the organizer determines why that event information is collected, while Maaya processes it to provide the service.
2. Information we collect
Information you provide
- Account and profile information, such as your name, email address, profile image, phone number, company, and social links.
- Organization information, including Organization identity, membership, reusable roles, event assignments, shared professional Contacts, Templates, and permission-scoped portfolio activity.
- Event information, including schedules, locations, Tasks, budgets, files, collaborators, vendors, artists, communications, and operational notes.
- Guest and attendee information, such as names, contact details, RSVP responses, accessibility or dietary notes, check-in status, and invitation activity.
- Ticketing and transaction information, including Ticket tiers, Orders, promo codes, payment status, refunds, transfers, and issued credentials.
- Subscription billing information, including Stripe Customer and subscription identifiers, billing status, current billing period, cancellation timing, payment-failure status, and the identifier and amount of the latest verified paid invoice. Stripe handles complete payment card details and hosts invoice and receipt documents.
- SMS consent records, including the mobile number, event or transaction, consent source, disclosure version, and time consent was provided.
- Messages, support requests, survey responses, and information submitted through our Contact page.
Information collected automatically
We may collect device, browser, IP address, request, diagnostic, security, and usage information when you interact with Maaya. This may include website and application page views, sessions, event page views, RSVP or volunteer signup starts, Ticket checkout starts, campaign parameters, the referring website’s domain, approximate country or region, and an optional ZIP or postal-code prefix you choose to provide.
Maaya uses first-party cookies and similar local storage to assign pseudonymous visitor and session identifiers across our websites and application. The visitor identifier may remain for up to 400 days, while a session ends after 30 minutes of inactivity. The API stores non-reversible HMAC-derived identifiers rather than the browser identifiers themselves. We also use cookies and similar storage for sign-in, preferences, security, and essential service functionality.
For event audience analytics, Maaya converts network and session signals into rotating, non-reversible identifiers. We do not retain raw IP addresses in event or site analytics, and organizers do not receive IP addresses, exact visitor identities, or individual browsing histories.
Information from service providers
We may receive identity details from sign-in providers, payment and receipt status from payment processors, and delivery status from email or messaging providers. Payment card details are handled by our payment processor; Maaya does not store complete card numbers.
3. How we use information
We use personal information to:
- Provide, secure, maintain, and improve Maaya.
- Create accounts, authenticate users, and manage access permissions.
- Operate events, invitations, RSVPs, check-in, ticketing, payments, refunds, transfers, communications, and reporting.
- Operate Organization memberships and permissions, shared Contacts and Templates, cross-event insights, Maaya Pro subscriptions, billing recovery, cancellation, and required service notices.
- Provide organizers with aggregated event reporting about interest, approximate geography, campaign performance, and conversion.
- Understand website and application use, acquisition sources, and conversion funnels so Maaya administrators can improve the service.
- Respond to questions, support requests, privacy requests, and feedback.
- Detect abuse, prevent fraud, troubleshoot failures, enforce our terms, and protect people and the service.
- Meet legal, accounting, tax, compliance, and recordkeeping obligations.
5. Your choices and privacy rights
You can update certain account and event information from within Maaya. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.
Use our Contact page and choose “Privacy request” to submit a request. We may need to verify your identity and authority before acting. We will not discriminate against you for exercising an applicable privacy right.
If an event organizer collected your information, we may direct your request to that organizer or help the organizer respond.
Organization Contacts are shared only with authorized Organization members according to their roles. If an Organization entered your professional contact information, you may ask that Organization or Maaya to review, correct, export, or delete it, subject to legal and operational recordkeeping needs.
Providing a ZIP or postal code on a public event form is optional. You may leave that field blank and still RSVP, purchase Tickets, or request a volunteer shift.
6. Retention and security
We retain information for as long as reasonably necessary to provide the service, maintain accurate event and transaction records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of information and why it is needed.
Canceling Maaya Pro does not immediately delete Organization records. Existing Templates and Contacts may remain readable and exportable so the Organization can preserve its work, and billing records may be retained for accounting, dispute, fraud-prevention, and legal obligations.
Raw Audience & Reach interaction records are retained for up to 90 days. Maaya may retain daily event-level aggregates with the event so organizers can understand longer-term results without retaining the underlying visitor interactions.
Raw site-wide analytics events are also retained for up to 90 days. Maaya may retain daily aggregate counts and server-verified conversion records for longer-term service reporting without retaining the underlying page-view events.
We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security, so please use a strong account, protect your sign-in credentials, and notify us if you believe your account or information has been compromised.
7. Children’s privacy
Maaya is not directed to children under 13, and children under 13 may not create a Maaya account. Event organizers are responsible for obtaining any permission required before entering information about minors into an event.
8. International use
Maaya and its service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for cross-border transfers.
9. Changes to this policy
We may update this policy as Maaya evolves or legal requirements change. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when required.
10. Contact us
Questions about this policy or Maaya’s privacy practices can be submitted through our Contact page. Select “Privacy request” so it reaches the right team.