Privacy Policy

Mavan Automation provides AI-powered business automation software. If you are a business using Mavan, you are our “Customer.” If you are a person who contacts a business through a channel that business connected to Mavan (for example by messaging them on WhatsApp or Instagram), you are an “End User,” and the business — not Mavan — decides how your data is used.

For any privacy question, or to exercise your rights, contact us at hello@mavan.app.

Information you provide

• Account data — name, email address, password, business name, role, and the industry/vertical you select during onboarding.
• Business profile — logo, brand details, working hours, locations, products, services, pricing and policies you add to your workspace.
• Knowledge content — documents, URLs and text you upload to train the AI assistant (your “Brain”).
• Communications — messages you send to our support team, survey responses and demo requests.

Data from connected accounts

When you connect a third-party platform, you authorize Mavan — through that platform’s official API and the permissions you grant — to access data needed to provide the feature. Depending on what you connect, this can include:

• Messaging & social — WhatsApp Business, Instagram, Facebook, Facebook Messenger, Telegram, TikTok: conversations, messages, sender profile names/IDs, comments and basic page/account metadata.
• Advertising — Meta and TikTok ad accounts: campaigns, ad creative and performance insights.
• Email — connected mailboxes (Google / Microsoft / IMAP) and Resend domains used for outreach: messages sent, replies, opens and clicks.
• Productivity & payments — Google, Slack, Microsoft Teams, Stripe and similar integrations: only the data scopes you approve.

We use data obtained from these platforms only to provide the features you turned on, in line with each platform’s developer terms. We do not sell it, and we do not use it for advertising unrelated to your workspace.

Google user data — Limited Use

Mavan’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. If you connect a Google account, we access only the scopes you approve — sending email on your behalf (Gmail), reading replies to conversations you manage in Mavan (Gmail), and creating calendar events you or your automations schedule (Google Calendar). We use this data solely to provide these user-facing features, never for advertising, and we do not allow humans to read it except with your explicit permission, for security purposes, or as required by law. Google user data is never sold or transferred to third parties, and is not used to train AI or machine-learning models. You can revoke Mavan’s access at any time in your workspace settings or at myaccount.google.com/permissions.

End-user & customer data you process

Your workspace stores the customer data you bring in or generate while using Mavan — contacts, leads, deals, notes, tasks, bookings, orders and conversation history. You are responsible for having a lawful basis and any required consent for this data.

Content you create

• Posts, captions and schedules you create or publish through Mavan.
• Images and videos generated in AI Studio.
• Workflows, sequences and automations you build.

Billing data

Payments and subscriptions are processed by our payment provider, Polar. We receive your plan, subscription status and transaction metadata, but we do not store full card numbers — those are handled by the payment provider.

Information collected automatically

• Usage data — pages and features used, actions taken, and credits consumed.
• Device & log data — IP address, browser type, device, timestamps and referring pages.
• Cookies — see the Cookies section below.

• Provide, operate and maintain the Services and your workspace.
• Authenticate you, secure accounts and prevent fraud or abuse.
• Generate AI replies, content and insights you request.
• Send messages, posts, campaigns and outreach on your instruction.
• Process payments, manage subscriptions and track credit usage.
• Provide support and respond to your requests.
• Send service and security notices, and (with consent where required) product updates.
• Monitor performance, debug issues and improve the Services.
• Comply with legal obligations and enforce our Terms.

We do not use the content of your or your end users’ conversations to train our own general AI models. AI providers process your content to return a result and, per the subprocessor terms below, do not use it to train their foundation models.

To deliver AI features, Mavan sends the relevant content (such as a customer message, a product, or a knowledge document) to trusted AI and infrastructure providers that process it on our behalf under data-protection agreements:

• AI text & reasoning — providers such as Groq, OpenAI and Anthropic, used to generate replies, drafts and assistant responses.
• AI media generation — fal.ai, used by AI Studio to generate images and video.
• Email delivery — Resend, used to send transactional and outreach email.
• Payments — Polar (and its underlying payment processor).
• Hosting & infrastructure — Vercel and Fly.io, used to run the application and background workers.
• Monitoring — Sentry, used to capture errors and keep the Services reliable.

We choose providers that contractually commit not to use your content to train their models, and we share only what is needed to perform the task. Our current list of subprocessors is available on request at hello@mavan.app.

We do not sell your personal information. We share it only:

• With subprocessors — the service providers listed above, under contract and only to run the Services.
• At your direction — with platforms you connect (for example, sending a reply back to WhatsApp or publishing a post to Instagram).
• Within your workspace — with teammates and collaborators you invite.
• For legal reasons — to comply with law, respond to lawful requests, or protect the rights, safety and security of Mavan, our users and the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, with notice and continued protection of your data.

Integrations are optional and controlled by you. When you connect or disconnect a platform, you manage that authorization in your workspace settings, and you can revoke it at any time there or in the platform’s own settings.

Your use of connected platforms is also governed by their terms and privacy policies, including the Meta Platform Terms and Meta Developer Policies for Facebook, Instagram, Messenger and WhatsApp, and the equivalent policies for TikTok, Google, Telegram and others. Mavan’s use of information received from these APIs adheres to each platform’s requirements, including limited-use rules.

We use strictly necessary cookies to keep you signed in (session cookies such as mavan_session and mavan_business) and to secure the app. We use a limited set of analytics to understand product usage and improve the Services. We do not use third-party advertising cookies on our website.

You can control cookies through your browser settings. Disabling necessary cookies may prevent you from signing in or using parts of the Services.

We keep personal information for as long as your account is active and as needed to provide the Services. When you delete data inside Mavan, or close your account, we delete or anonymize the associated personal data within a reasonable period, except where we must retain it to comply with law, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

We protect data with encryption in transit, access controls, tenant isolation between workspaces, secret management and continuous monitoring. No method of transmission or storage is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

Mavan operates globally, and your information may be processed in countries other than your own, including where our providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

Depending on where you live, you may have the right to access, correct, delete, export (portability), restrict, or object to the processing of your personal information, and to withdraw consent. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA) have these and related rights, including the right not to be discriminated against for exercising them. We do not sell or “share” personal information for cross-context behavioral advertising.

To exercise any right, email hello@mavan.app. We will verify your request and respond within the time required by law. If you are an End User, we will route your request to the relevant business (the controller of that data) and assist them as their processor.

You can delete data from within the app at any time, disconnect any integration to stop further data collection, or request full account deletion.

• In-app — delete records, knowledge documents, generated media or conversations directly in your workspace.
• Disconnect a platform — go to Settings → Integrations (or the relevant connection) and revoke access.
• Full deletion — email hello@mavan.app with the subject “Data Deletion Request” from your account email, and we will delete your account and associated personal data, subject to legal retention requirements.

The Services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact hello@mavan.app and we will delete it.

Our Services may link to third-party sites and tools we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.

We may update this Privacy Policy as the Services evolve. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised policy.

Questions, requests or concerns about this Privacy Policy or your data can be sent to hello@mavan.app, or by mail to FARAHI, 47 Alderney Avenue, Hamilton, Ontario, L9A2A6, Canada.