Data Deletion Instructions & Privacy Rights

Effective Date: March 13, 2026

Overview

Mavira AI ("we," "our," or "us") is committed to protecting your privacy and giving you control over your personal data. This page explains your rights regarding data deletion and how to exercise them. This policy applies to all users of our services, regardless of how you access them (web, mobile app, API, or other platforms).

Your Privacy Rights

Depending on your location and applicable laws (including GDPR, CCPA, VCDPA, and other privacy regulations), you may have the following rights:

Right to Access

Request a copy of your personal data we hold

Right to Deletion

Request deletion of your personal data

Right to Correction

Request correction of inaccurate data

Right to Portability

Receive your data in a machine-readable format

Right to Object

Object to certain processing of your data

Right to Restrict Processing

Request limitation on how we process your data

Right to Opt-Out

Opt-out of sale/sharing of personal information (where applicable)

Right to Non-Discrimination

Exercise your rights without discriminatory treatment

What Data We Collect and Store

We may collect and store the following categories of information:

Account Information

  • Email address
  • Name and profile information (as provided by you or third-party authentication providers)
  • Unique user identifiers and authentication tokens
  • Account preferences and settings
  • Profile picture or avatar (if provided)

Usage Data

  • Content you create, upload, or share through our services
  • Search queries and interaction history
  • Feature usage and preferences
  • Feedback, ratings, and communications with us
  • Files, documents, and other content you upload

Technical Information

  • IP address and approximate location data
  • Device information (type, operating system, browser)
  • Log data and analytics (page views, clicks, session duration)
  • Cookies and similar tracking technologies
  • Error reports and performance data

Payment Information (if applicable)

  • Billing address and contact information
  • Payment method details (processed by third-party payment processors)
  • Transaction history and purchase records

Third-Party Data

  • Information from social media platforms (Facebook, Google, etc.) when you use social login
  • Data from integrated services and APIs you connect to our platform

How to Request Data Deletion

Submission Methods

You can submit a data deletion request through the following method:

Email

team@maviraai.com

Subject: "Data Deletion Request"

Required Information

To process your request, please include:

  • The email address associated with your account
  • Your full name (as it appears in our records)
  • A clear statement requesting data deletion
  • Specific data categories you want deleted (or indicate "all data")
  • Your location/jurisdiction (helps us apply the correct legal framework)
  • Any additional information that helps us verify your identity

Verification Process

To protect your privacy and security, we must verify your identity before processing deletion requests. We may ask you to:

  • Respond from the email address associated with your account
  • Provide additional identifying information
  • Confirm recent account activity
  • Complete a verification process through our platform

We will not delete data without proper verification to prevent unauthorized access and deletion.

Processing Timeline

Day 1-3

Acknowledgment

We will acknowledge receipt of your request

Day 3-10

Identity Verification

We will verify your identity and the validity of your request

Day 10-30

Deletion Process

We will delete your data from active systems and begin deletion from backup systems

Day 30-90

Complete Deletion

Full deletion from all systems, including backups and archives

Note: While we complete most deletions within 30 days, some data in backup systems may take up to 90 days to be fully removed. During this period, the data is no longer accessible for operational use but may exist in backup or archived systems for technical and security reasons.

Scope of Deletion

Data That Will Be Deleted

  • Your account profile and registration information
  • Content you created, uploaded, or stored in our service
  • Your preferences, settings, and customizations
  • Your usage history and activity logs (where not required for legal purposes)
  • Authentication tokens and access credentials
  • Communications and correspondence with our support team (where legally permissible)
  • Marketing preferences and communication history

Data That May Be Retained

We may retain certain information when we have a legal obligation or legitimate business need:

  • Transaction records required for financial, tax, or audit purposes (typically 7 years)
  • Data necessary to comply with legal obligations, court orders, or government requests
  • Information required to resolve disputes, enforce agreements, or pursue legal claims
  • Aggregated or anonymized data that cannot be used to identify you
  • Data necessary for fraud prevention, security, and safety purposes
  • Backup copies stored for disaster recovery (deleted within 90 days)
  • Data required to fulfill contractual obligations to third parties

Impact on Shared or Public Content

Please note:

  • Content you shared publicly may remain accessible to others even after deletion
  • Content shared with other users may remain visible to them
  • Copies made by other users are not within our control
  • Third-party services you connected to may retain their own copies of data
  • Cached or archived versions on third-party platforms are outside our control

Exceptions and Limitations

When We May Deny or Delay Requests

We may deny or delay your deletion request if:

  • We cannot verify your identity despite reasonable efforts
  • The request is manifestly unfounded or excessive (particularly if repetitive)
  • We have a legal obligation to retain the data
  • The data is necessary to complete a transaction you requested
  • The data is needed to detect, prevent, or investigate security incidents or fraud
  • The data is necessary to exercise free speech or ensure another's rights
  • The data is used solely for internal purposes aligned with your expectations
  • The data is necessary for scientific, historical, or statistical research in the public interest
  • We are subject to an ongoing legal process requiring data preservation

If we deny your request, we will explain why and inform you of your right to appeal or lodge a complaint with a supervisory authority.

Active Legal Proceedings

If you or your data are subject to an active investigation, litigation, or legal hold, we may be legally prohibited from deleting your data until the matter is resolved. We will inform you if this applies to your request.

Third-Party Services and Social Media

Revoking Third-Party Access

If you logged in using a third-party service (Facebook, Google, Apple, etc.), you should also revoke access directly through that platform:

Facebook

  1. Go to Facebook Settings & Privacy → Settings
  2. Click on Apps and Websites
  3. Find Mavira AI in the list
  4. Click Remove

Google

  1. Go to your Google Account
  2. Navigate to Security → Third-party apps with account access
  3. Find Mavira AI and click Remove Access

Apple

  1. Go to Settings → [Your Name] → Password & Security
  2. Tap Apps Using Apple ID
  3. Select Mavira AI and tap Stop Using Apple ID

Important: Revoking access through third-party platforms only prevents future data sharing. It does not delete data already stored on our servers. You must submit a deletion request to us separately to remove your data from our systems.

Third-Party Data Retention

Third-party services may have their own data retention policies. Deleting your data from our service does not affect data held by:

  • Social media platforms you used to log in
  • Payment processors (Stripe, PayPal, etc.)
  • Analytics providers (Google Analytics, etc.)
  • Cloud infrastructure providers
  • Third-party services you connected or integrated with our platform

Please contact these services directly to request deletion of data they hold.

Children's Privacy

Our service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction, such as 16 in some European countries). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at team@maviraai.com. We will take steps to delete such information promptly.

If we discover that we have collected personal information from a child without appropriate consent, we will delete that information as quickly as possible.

International Data Transfers

Your data may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

We take appropriate safeguards to ensure your data receives adequate protection, including:

  • Using Standard Contractual Clauses approved by the European Commission
  • Ensuring third-party processors comply with applicable data protection frameworks
  • Implementing appropriate technical and organizational security measures
  • Limiting data transfers to countries with adequate protection

When you request data deletion, we will ensure deletion across all locations where your data is stored or processed, subject to applicable legal requirements in those jurisdictions.

Region-Specific Rights

European Economic Area (EEA), UK, and Switzerland

Under GDPR, you have additional rights including:

  • The right to lodge a complaint with your local supervisory authority
  • The right to withdraw consent at any time (where processing is based on consent)
  • The right to data portability in a structured, machine-readable format
  • The right to object to processing based on legitimate interests
  • The right to not be subject to automated decision-making

To find your supervisory authority, visit: edpb.europa.eu

California Residents (CCPA/CPRA)

California residents have specific rights under the CCPA/CPRA:

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information (with certain exceptions)
  • Right to opt-out of the sale or sharing of personal information
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

Do Not Sell My Personal Information: We do not sell personal information as traditionally defined. However, if you want to opt-out of any data sharing that might be considered a "sale" under California law, contact us at team@maviraai.com.

Other U.S. States

If you reside in Virginia, Colorado, Connecticut, Utah, or other states with comprehensive privacy laws, you may have similar rights to those described above. Contact us to exercise these rights.

Brazil (LGPD)

Brazilian residents have rights under LGPD, including the right to request deletion and correction of personal data, and the right to know about data sharing practices.

Other Jurisdictions

We respect privacy rights globally. If your jurisdiction has data protection laws not specifically mentioned here, contact us to learn about your rights and how to exercise them.

After Deletion

What Happens to Your Account

  • Your account will be permanently deactivated
  • You will no longer be able to access our services with your previous credentials
  • Any subscriptions or paid services will be canceled
  • You will receive a confirmation email once deletion is complete
  • You may create a new account in the future, but it will not retain any previous data

Reactivation Not Possible

Once your data is deleted, it cannot be recovered. If you wish to use our service again, you will need to create a new account and start fresh. Consider this carefully before submitting a deletion request.

Canceling a Deletion Request

You may cancel your deletion request before we begin processing it by contacting us at team@maviraai.com. Once deletion has begun, it cannot be reversed.

Automated Decision-Making

We may use automated systems and artificial intelligence to process your data, including for:

  • Personalizing content and recommendations
  • Detecting and preventing fraud or abuse
  • Improving our AI models and services
  • Analyzing usage patterns and preferences

You have the right to:

  • Request human review of automated decisions that significantly affect you
  • Express your point of view regarding automated decisions
  • Contest automated decisions

Data Security During Deletion

We employ industry-standard security measures throughout the deletion process:

  • Secure deletion protocols that make data unrecoverable
  • Encrypted transmission and storage during the deletion process
  • Access controls limiting who can execute deletions
  • Audit trails documenting all deletion activities
  • Regular security audits and compliance checks

Despite our best efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to using commercially reasonable security measures.

Data Breach Notification

If we experience a data breach that affects your personal information before deletion is complete, we will:

  • Notify you without undue delay (within 72 hours for EEA residents, as required by GDPR)
  • Inform relevant supervisory authorities as required by law
  • Describe the nature of the breach and the data affected
  • Explain the likely consequences and our response measures
  • Provide guidance on steps you can take to protect yourself

Appeals and Complaints

If Your Request Is Denied

If we deny your deletion request, you have the right to appeal. To appeal:

  1. Email us at team@maviraai.com with "Appeal - Data Deletion" in the subject line
  2. Explain why you believe the denial was incorrect
  3. Provide any additional information that supports your appeal

We will review your appeal within 30 days and provide a written response.

Complaints to Supervisory Authorities

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately. You can find your authority at:

  • EEA/UK: edpb.europa.eu
  • California: California Attorney General's Office
  • Other states: Your state's Attorney General or Consumer Protection office

We encourage you to contact us first so we can address your concerns directly.

Business Transfers

If Mavira AI is involved in a merger, acquisition, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will:

  • Notify you before your information is transferred
  • Inform you if the new entity has a different privacy policy
  • Provide you the option to delete your data before the transfer (where feasible)
  • Ensure the new entity honors existing deletion requests

Changes to This Policy

We may update this data deletion policy from time to time. When we make significant changes, we will:

  • Post the updated policy on this page with a new "Effective Date"
  • Notify you via email (if you have an active account)
  • Provide notice through our service or website
  • For material changes, obtain your consent where required by law

We encourage you to review this policy periodically. Continued use of our service after changes constitutes acceptance of the updated policy.

Contact Information

Privacy Team

For all privacy-related inquiries, including data deletion requests:

Email: team@maviraai.com

Subject Line: Data Deletion Request (or Privacy Inquiry)

Data Protection Officer (if applicable)

Aubrey Stevens aubrey@maviraai.com

Response Time

We aim to respond to all inquiries within 3 business days and complete most requests within 30 days.

Additional Information

Governing Law: This policy and any disputes relating to it shall be governed by [specify jurisdiction - e.g., "the laws of the State of Delaware, United States, without regard to its conflict of law provisions"].

Entire Agreement: This data deletion policy should be read in conjunction with our Privacy Policy and Terms of Service, which govern your use of our services.

Severability: If any provision of this policy is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this policy will otherwise remain in full force and effect.

No Waiver: Our failure to enforce any right or provision of this policy will not be deemed a waiver of such right or provision.

Language: This policy is provided in English. Translations may be provided for convenience, but the English version controls in case of conflicts.

Last Updated: March 13, 2026

© 2026 Mavira AI. All rights reserved.