Legal

Privacy Policy

Last updated: April 20, 2025. Effective immediately.

1 Information We Collect

We collect information you provide directly (name, email, company name, billing details) and information collected automatically when you use our services (IP address, browser type, pages visited, referring URLs, device type, and usage patterns via cookies and analytics).

2 How We Use Your Information

We use collected information to: deliver and improve our services; communicate with you about your account and our offerings; process payments; send marketing emails (with your consent); prevent fraud; comply with legal obligations; and analyse usage to enhance user experience.

3 Data Sharing

We do not sell your personal data. We share information only with: service providers acting on our behalf (payment processors, email platforms, analytics tools) under strict data-processing agreements; business partners with your explicit consent; and law enforcement when legally required.

4 Cookies

We use essential cookies (required for the service to function), analytics cookies (Google Analytics, self-hosted Plausible), and optional marketing cookies. You can manage cookie preferences via the consent banner on your first visit or through your browser settings.

5 Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, we delete or anonymise your data within 90 days, except where we have a legal obligation to retain it longer.

6 Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. Contact privacy@mabdigital.io to exercise any right.

7 International Transfers

MAB Digital operates globally. Your data may be transferred to and processed in countries outside your own, including the United States. We ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions) are in place for all international transfers.

8 Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, strict access controls, regular security audits, and SOC 2 Type II compliance. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9 Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

10 Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through a prominent notice on our website at least 30 days before changes take effect.

11 Contact Us

For privacy-related questions or to exercise your data rights, contact our Data Protection Officer at: privacy@mabdigital.io — MAB Digital, 548 Market St, San Francisco, CA 94104, USA.

Questions? Email privacy@mabdigital.io