Privacy Policy

Maata Ltd operates the Maata policy lifecycle management platform. References to "we", "our", or "Maata" in this policy refer to Maata Ltd.

If you have questions about how we handle your data, contact us at info@maata.xyz.

Information you provide directly

• Account information: your name, email address, job title, and organisation when you register
• Profile information: any additional details you add to your profile
• Policy content: documents, comments, consultation responses, annotations, and other content you create or contribute on the platform
• Communications: messages you send to our support team or through the platform

Information collected automatically

• Usage data: pages visited, features used, actions taken, and timestamps
• Cookies and similar technologies: as described in our Cookie Policy

Information from third parties

If your organisation uses Maata under an enterprise agreement, we may receive your account details from your organisation's administrator.

We use the information we collect to:

• Provide, maintain, and improve the Maata platform
• Authenticate your identity and manage your account
• Send service notifications, security alerts, and support responses
• Analyse usage patterns to improve platform performance and usability
• Comply with legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your content to train AI or machine learning models without your explicit consent.

Where applicable data protection law requires a legal basis for processing, we rely on one of the following:

• Contract performance: to provide the service you have agreed to use
• Legitimate interests: to operate and improve the platform, prevent fraud, and ensure security
• Legal obligation: where processing is required by applicable law
• Consent: for optional features or communications where you have given consent

We share your information only in the following circumstances:

• Within your organisation: content and activity on shared workspaces is visible to other members of your organisation's account, as configured by your administrator
• Service providers: we use third-party providers for infrastructure, analytics, and support, each bound by data processing agreements
• Legal requirements: where required by law, court order, or to protect the rights and safety of Maata or others
• Business transfers: if Maata is acquired or merges with another entity, your data may transfer as part of that transaction, with advance notice

We retain your personal data for as long as your account is active or as needed to provide the service. When you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.

Policy content created within a shared workspace may be retained according to the data retention settings configured by your organisation's administrator.

We use industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, and regular security reviews.

No system is completely secure. If you become aware of a potential security issue, please contact us at info@maata.xyz.

Maata operates from Rwanda and may process data on servers located in other countries. Where we transfer data outside your jurisdiction, we ensure appropriate safeguards are in place in accordance with applicable law.

Depending on where you are located, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate or incomplete data
• Deletion of your personal data, subject to legal retention obligations
• Restriction or objection to certain types of processing
• Data portability

To exercise any of these rights, contact us at info@maata.xyz. We will respond within the timeframe required by applicable law.

Maata is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via the platform or by email. The date at the top of this document indicates when it was last revised.

For any privacy-related questions, please contact us at info@maata.xyz.