1. Introduction

Welcome to Mayavi (operated by Incredible Visibility Solutions). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://mayavi.ai and our associated services, including integrations with third-party platforms such as Facebook and Instagram.

Mayavi is an AI-powered platform that enables businesses to build intelligent agents capable of interacting with customers across multiple channels, including Facebook Pages, Instagram accounts, and other communication platforms. By using our services, you agree to the collection and use of information in accordance with this policy.

We are committed to protecting your privacy and handling your data transparently. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide

• Account registration information (name, email address, password)
• Organization and team details
• Payment and billing information (processed by third-party payment providers)
• Content you create within the platform (agents, knowledge bases, tools, configurations)
• Communications with our support team

2.2 Information Collected Automatically

• Device and browser information (browser type, operating system, device type)
• IP address and approximate location
• Usage data (pages visited, features used, time spent on the platform)
• Log data (access times, error logs, referring URLs)

2.3 Information from Third-Party Platforms

When you connect third-party accounts (such as Facebook or Instagram) to our platform, we collect certain information from those platforms as authorized by you during the OAuth consent process. This data is detailed in Section 3 below.

3. Facebook & Instagram Data

Mayavi integrates with Meta platforms (Facebook and Instagram) to enable AI agents to manage social media interactions on your behalf. When you connect your Facebook or Instagram account, we request specific permissions and access only the data necessary to provide our services.

3.1 Facebook Permissions & Data

When you connect a Facebook account, we request the following permissions through Facebook's OAuth authorization flow:

PermissionPurposepages_show_listDisplay your Facebook Pages so you can select which pages to connectpages_read_engagementRead engagement metrics on your Page to provide context to AI agentspages_read_user_contentRead posts and content on your Page so agents can respond to commentspages_manage_postsCreate and manage posts on your Page on your behalfpages_manage_engagementManage comments and reactions on your Page postspages_messagingSend and receive messages through your Page via Messengerpublic_profileAccess your basic profile information for account identification

Data we access from Facebook:

• Your public profile information (name, profile picture)
• List of Facebook Pages you manage
• Page details (name, category, page ID)
• Page posts and their content
• Comments on Page posts
• Messages sent to your Page via Messenger
• Page engagement metrics

3.2 Instagram Permissions & Data

When you connect an Instagram Business or Creator account, we request the following permissions:

PermissionPurposeinstagram_business_basicAccess basic profile information (username, account type, media count)instagram_business_manage_messagesSend and receive direct messages on your behalfinstagram_business_manage_commentsRead and reply to comments on your posts, reels, and storiesinstagram_business_content_publishPublish content to your Instagram account on your behalfinstagram_business_manage_insightsAccess account insights and analytics for performance monitoring

Data we access from Instagram:

• Your Instagram business profile information (username, account type, media count)
• Your posts, reels, and stories metadata
• Comments on your posts and reels
• Story replies
• Direct messages sent to your account
• Account insights and analytics

3.3 How We Use Facebook & Instagram Data

Data obtained from Facebook and Instagram is used strictly for the following purposes:

• Enabling your AI agents to read and respond to comments on your posts
• Enabling your AI agents to send and receive messages on your behalf
• Creating posts on your connected pages/accounts as instructed by you
• Triggering automated agent workflows based on incoming comments, messages, or story replies
• Displaying your connected accounts and their content within our platform for configuration purposes
• Providing you with analytics and insights about agent interactions on your social media accounts

Important Limitations:

• We do not sell Facebook or Instagram data to third parties
• We do not use Facebook or Instagram data for advertising or ad targeting
• We do not use Facebook or Instagram data to build user profiles for purposes unrelated to providing our services
• We do not transfer Facebook or Instagram data to data brokers
• Facebook and Instagram data is only used to provide and improve the specific services you have configured

3.4 Token Management & Security

When you authorize our application, we receive OAuth access tokens that allow us to interact with Facebook and Instagram APIs on your behalf. These tokens are:

• Encrypted at rest using industry-standard encryption
• Never shared with third parties
• Automatically refreshed when necessary (Instagram tokens are refreshed before expiration)
• Immediately revoked when you disconnect your account from our platform

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our platform and services
• To process and manage your account registration and settings
• To enable AI agent functionality across connected channels (Facebook, Instagram, and others)
• To process and respond to customer interactions through your configured agents
• To send you technical notices, updates, security alerts, and administrative messages
• To respond to your support requests and provide customer service
• To monitor and analyze usage trends to improve our platform
• To detect, prevent, and address technical issues, fraud, or security concerns
• To comply with legal obligations

5. Data Storage & Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information.

5.1 Security Measures

• All data is encrypted in transit using TLS/SSL (HTTPS)
• Sensitive credentials (including OAuth tokens) are encrypted at rest
• Access to user data is restricted to authorized personnel on a need-to-know basis
• We use secure, industry-standard cloud infrastructure with regular security audits
• Authentication is managed through Supabase with secure session management
• API access is protected through authentication tokens and rate limiting

5.2 Data Storage Location

Your data is stored on secure cloud servers. We use commercially reasonable efforts to ensure that your data is stored and processed in compliance with applicable data protection regulations.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• With service providers who assist us in operating our platform (hosting, analytics, payment processing) under strict data processing agreements
• With AI model providers (such as OpenAI) to process agent interactions -- only the minimum data necessary for generating responses is shared, and these providers are contractually prohibited from using your data to train their models
• When required by law, regulation, or legal process
• To protect the rights, property, or safety of our users, ourselves, or others
• With your explicit consent

Regarding Meta Platform Data:

Data obtained from Facebook and Instagram APIs is subject to the Meta Platform Terms and Meta Developer Policies. We do not share Facebook or Instagram data with any third parties except as strictly necessary to provide our services (e.g., processing through AI models to generate responses), and we comply fully with Meta's Platform Terms regarding data use, storage, and deletion.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account data: Retained for the duration of your active account, plus a reasonable period after account deletion to allow for reactivation or dispute resolution
• Facebook and Instagram data: Cached temporarily for active agent operations and removed when you disconnect your account or delete the associated agent configuration
• OAuth tokens: Stored only while the integration is active; deleted immediately upon disconnection
• Conversation logs: Retained based on your organization's configuration settings
• Usage analytics: Retained in aggregated, anonymized form for service improvement

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (see Section 9)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent for processing

To exercise any of these rights, please contact us at privacy@mayavi.ai. We will respond to your request within 30 days.

8.1 Managing Connected Accounts

You can manage your Facebook and Instagram connections at any time through your Mayavi dashboard:

• Disconnect a Facebook Page or Instagram account from the Credentials section in your agent settings
• Revoke access by removing our application from your Facebook or Instagram account settings directly on those platforms
• Modify agent configurations to change what actions are performed on your behalf

9. Data Deletion

We provide multiple ways to delete your data:

9.1 Deleting Connected Account Data

When you disconnect a Facebook Page or Instagram account from our platform:

• All stored OAuth tokens for that account are immediately and permanently deleted
• All trigger subscriptions associated with that account are removed
• Cached social media content (posts, comments, messages) associated with that account is deleted
• Agent configurations referencing that account are updated to remove the connection

9.2 Deleting Your Account

You may request complete deletion of your account and all associated data by contacting us at privacy@mayavi.ai. Upon receiving your request, we will:

• Delete all your personal account information
• Delete all connected social media credentials and tokens
• Delete all agent configurations, knowledge bases, and tool settings
• Delete all conversation logs and interaction history
• Remove all trigger subscriptions and webhook configurations
• Complete the deletion within 30 days of your request

9.3 Meta Data Deletion Callback

In compliance with Meta Platform requirements, we support data deletion callbacks. When a user removes our application from their Facebook or Instagram settings, we receive a notification and promptly delete all data associated with that user's connected accounts from our systems.

10. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform:

• Essential cookies: Required for platform functionality (authentication, session management)
• Analytics cookies: Help us understand how users interact with our platform to improve our services
• Preference cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of our platform.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at privacy@mayavi.ai.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from those in your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy wherever it is processed.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or through a prominent notice on our platform
• Where required by law, obtain your consent to the changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Incredible Visibility Solutions

Email: privacy@mayavi.ai

Support: support@mayavi.ai

Website: https://mayavi.ai

‍