Legal
Privacy Policy
Last updated: 24 February 2026
1. Who We Are
MaiaLabs ("we", "us", "our") is an AI-powered copywriting service operating under the domain maialabs.net.
Data controller contact:
Email: info@maialabs.net
Website: https://maialabs.net
This Privacy Policy applies to personal data collected through our website and services. It is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We collect the following categories of personal data:
| Contact information | Name, email address, business name, website URL |
| Project information | Details about your business, products, target audience, copy requirements |
| Payment information | Processed securely by Stripe — we never store card details |
| Communications | Emails and messages you send to info@maialabs.net |
| Usage data | Pages visited, browser type, IP address (collected via standard server logs) |
| Cookies | Session and analytics cookies (see Section 8) |
We do not collect special category data (health, ethnicity, religion, etc.) and do not knowingly collect data from anyone under the age of 16.
3. How We Use Your Data
| To deliver our copywriting services | Fulfilling your order and communicating about deliverables |
| To process payments | Passing order details to Stripe for secure payment processing |
| To respond to enquiries | Replying to contact form submissions and emails |
| To improve our services | Analysing how the website is used (aggregated, anonymised) |
| To send service updates | Order confirmations, delivery notifications — no marketing without consent |
4. Legal Basis for Processing (UK GDPR Article 6)
We process your personal data under the following lawful bases:
- Contract (Art. 6(1)(b)): Processing necessary to fulfil your order or take pre-contractual steps at your request.
- Legitimate interests (Art. 6(1)(f)): Responding to enquiries, preventing fraud, and improving our website — balanced against your rights.
- Consent (Art. 6(1)(a)): Where you have explicitly opted in (e.g. marketing emails). You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): Where we are required to retain data by law (e.g. financial records).
5. Who We Share Your Data With
We do not sell your data. We share data only with trusted third-party processors necessary to operate our service:
| Stripe | Payment processing — stripe.com — USA (SCCs / adequacy) |
| Vercel | Website hosting — vercel.com — USA (SCCs) |
| Resend | Transactional email delivery — resend.com |
| Workspace email (info@maialabs.net) — USA (SCCs) | |
| OpenRouter / OpenAI | AI chat (Rank) — anonymised message content only — USA (SCCs) |
All third-party processors are bound by data processing agreements and are required to protect your data in accordance with UK GDPR.
6. International Transfers
Some of our third-party processors are based outside the UK/EEA (primarily the USA). Where this is the case, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or reliance on an adequacy decision.
7. How Long We Keep Your Data
| Customer project data | 3 years from project completion (for dispute resolution) |
| Financial / payment records | 7 years (legal requirement under UK tax law) |
| Email enquiries | 2 years from last contact |
| Website usage / server logs | 90 days, then automatically deleted |
After these periods, your data is securely deleted or anonymised.
8. Cookies
Our website uses the following cookies:
| Essential cookies | Required for the site to function. Cannot be disabled. |
| Analytics cookies | Anonymous usage statistics to help us improve the site. No personal identification. |
We do not use advertising or tracking cookies. You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.
9. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention requirements.
- Right to restrict processing — ask us to limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Rights related to automated decision-making — we do not make solely automated decisions with legal or significant effects.
To exercise any of these rights, email us at info@maialabs.net. We will respond within 30 days.
10. How to Complain
If you are unhappy with how we handle your data, please contact us first at info@maialabs.net and we will do our best to resolve your concern.
You also have the right to lodge a complaint with the UK supervisory authority:
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
11. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted communications (HTTPS), access controls, and secure third-party processors.
No internet transmission is 100% secure. If you have concerns about the security of your data, please contact us at info@maialabs.net.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Significant changes will be communicated via email where we hold your contact details.
We encourage you to review this policy periodically.
13. Contact Us
For any privacy-related questions or to exercise your rights: