Mavira AI LLC
Effective Date: 2026-10-23
Last Updated: 2026-10-23
This page explains how to exercise your data rights with Mavira AI LLC ("we," "our," or "us"), including how to request deletion of your personal data. For a full description of what we collect and how we use it, see our Privacy Policy.
This policy applies to personal data we hold about you as a user of our website at mavira.io and maviraai.com and any services linked to this policy, however you access them.
Important — Shopify App: If you are a Merchant using our Shopify App or you are requesting deletion of data collected through our Shopify App, different (generally shorter) timelines apply. Please see our App Privacy Policy, especially Sections 7 and 10, for the applicable deletion process and timelines.
Depending on your location and applicable laws (including GDPR, UK GDPR, CCPA, VCDPA, and other privacy regulations), you may have the following rights:
Request a copy of your personal data we hold
Request deletion of your personal data
Request correction of inaccurate data
Receive your data in a machine-readable format
Object to certain processing of your data
Request limitation on how we process your data
Opt-out of sale/sharing of personal information (where applicable)
Exercise your rights without discriminatory treatment
We may collect and store the following categories of information:
For a complete list of what we collect, see our Privacy Policy and Cookie Policy.
You can submit a data deletion request through the following method:
To process your request, please include:
To protect your privacy and security, we must verify your identity before processing deletion requests. We may ask you to:
We will not delete data without proper verification to prevent unauthorized access and deletion.
For website user data (not Shopify App data — see below):
Acknowledgment
We will acknowledge receipt of your request
Identity Verification
We will verify your identity and the validity of your request
Deletion Process
We will delete your data from active systems and begin deletion from backup systems
Complete Deletion
Full deletion from all systems, including backups and archives
Note: While we complete most deletions within 30 days, some data in backup systems may take up to 90 days to be fully removed. During this period, the data is no longer accessible for operational use but may exist in backup or archived systems for technical and security reasons.
For Shopify App data: See App Privacy Policy §§7 and 10.
Order-level data is the only end-customer data the App holds. The App erases it by removing the order identifiers (the Shopify order ID and order name, and any Shopify error text recorded with a failed charge, which can quote them) from its commission and commission-credit records. The records themselves are kept, pseudonymized, as financial records. Order identifiers are removed:
app/uninstalled webhook. On receipt, the App immediately deletes the Merchant's Shopify OAuth session tokens and schedules the removal of the order identifiers. If the Merchant reinstalls the App and the App is then opened in the Shopify admin before the removal runs, the scheduled removal is cancelled.shop/redact webhook as a safety net, and the App repeats that removal for any records the scheduled job did not already process.customers/redact. The identifiers of an individual end customer's orders are removed from the matching records, independently of any uninstall.After uninstall, order identifiers are always removed within thirty (30) days, and in practice much sooner. Once they are removed, the App's records carry no customer identifier, order ID, or order name for those orders. They are pseudonymized rather than anonymous: the Merchant may be able to match a kept amount and date to its own order, and emails sent before the removal may still name the order (see App Privacy Policy §3.2).
What is not removed on this timeline is Merchant business data. The financial portion of the pseudonymized commission and commission-credit records is retained for ten (10) years for accounting, tax, and dispute-resolution purposes, and an unused credit remains usable if the Merchant reinstalls, until it is deleted ten (10) years after it was issued. The commission account and Shopify installation records, which contain no end-customer data, are retained for as long as the records that reference them. The partner profile is kept by Mavira as part of the referral partnership, outside the App. A Merchant can request deletion of this data, in which case only the details that support the retained financial records are kept (of the partner profile, only Mavira's internal identifier for the partner and the partner's name). See App Privacy Policy §§7.2 and 8.
We may retain certain information when we have a legal obligation or legitimate business need:
Please note:
We may deny or delay your deletion request if:
If we deny your request, we will explain why and inform you of your right to appeal or lodge a complaint with a supervisory authority.
If you or your data are subject to an active investigation, litigation, or legal hold, we may be legally prohibited from deleting your data until the matter is resolved. We will inform you if this applies to your request.
If you logged in using Google, you should also revoke access directly through Google:
Important: Revoking access through Google only prevents future data sharing. It does not delete data already stored on our servers. You must submit a deletion request to us separately to remove your data from our systems.
Third-party services may have their own data retention policies. Deleting your data from our service does not affect data held by:
Please contact these services directly to request deletion of data they hold.
Our service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction, such as 16 in some European countries). We do not knowingly collect personal information from children.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at team@maviraai.com. We will take steps to delete such information promptly.
If we discover that we have collected personal information from a child without appropriate consent, we will delete that information as quickly as possible.
Your data may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
We take appropriate safeguards to ensure your data receives adequate protection, including:
When you request data deletion, we will ensure deletion across all locations where your data is stored or processed, subject to applicable legal requirements in those jurisdictions.
Under GDPR or UK GDPR, you have additional rights including:
To find your EU supervisory authority, visit: edpb.europa.eu. For the UK, contact the Information Commissioner's Office (ico.org.uk).
California residents have specific rights under the CCPA/CPRA:
Do Not Sell My Personal Information: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. No opt-out is required, because there is nothing to opt out of. We nonetheless recognize Global Privacy Control (GPC) signals and honor them as opt-out requests. California enforcement is shared between the California Privacy Protection Agency (CPPA) and the California Attorney General.
If you reside in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Washington, Florida, Delaware, or another state with a comprehensive privacy law, you may have similar rights to those described above. Contact us to exercise these rights.
Brazilian residents have rights under LGPD, including the right to request deletion and correction of personal data, and the right to know about data sharing practices.
We respect privacy rights globally. If your jurisdiction has data protection laws not specifically mentioned here, contact us to learn about your rights and how to exercise them.
Once your data is deleted, it cannot be recovered. If you wish to use our service again, you will need to create a new account and start fresh. Consider this carefully before submitting a deletion request.
You may cancel your deletion request before we begin processing it by contacting us at team@maviraai.com. Once deletion has begun, it cannot be reversed.
We may use automated systems and artificial intelligence to process your data, including for:
You have the right to:
We employ industry-standard security measures throughout the deletion process:
Despite our best efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to using commercially reasonable security measures.
If we experience a data breach that affects your personal information before deletion is complete, we will:
If we deny your deletion request, you have the right to appeal. To appeal:
We will review your appeal within 30 days and provide a written response.
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately. You can find your authority at:
We encourage you to contact us first so we can address your concerns directly.
If Mavira AI is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will:
We may update this data deletion policy from time to time. When we make significant changes, we will:
We encourage you to review this policy periodically. Continued use of our service after changes constitutes acceptance of the updated policy.
For all privacy-related inquiries, including data deletion requests:
Mavira AI LLC
Registered Office: 16192 Coastal Highway, Lewes, Delaware 19958, County of Sussex
Website: mavira.io and maviraai.com
Privacy inquiries: team@maviraai.com
Subject Line: Data Deletion Request (or Privacy Inquiry)
While not required to do so under applicable law, Mavira AI LLC has voluntarily designated a privacy contact to oversee data protection matters:
Aubrey Stevens — aubrey@maviraai.com
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our GDPR representative and your point of contact for the following regions:
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit the following website: app.prighter.com/portal/maviraai
We aim to respond to all inquiries within 3 business days and complete most requests within 30 days.
Governing Law: This policy and any disputes relating to it shall be governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions.
Entire Agreement: This data deletion policy should be read in conjunction with our Privacy Policy and Terms of Service, which govern your use of our services.
Severability: If any provision of this policy is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this policy will otherwise remain in full force and effect.
No Waiver: Our failure to enforce any right or provision of this policy will not be deemed a waiver of such right or provision.
Language: This policy is provided in English. Translations may be provided for convenience, but the English version controls in case of conflicts.
© 2026 Mavira AI LLC. All rights reserved.