The privacy policy
Your data, your rules.
Last updated: 16 October 2026
Privacy is a right, not a settings page. This is what we collect, why, and what you control. Short on purpose.
Who we are
Maua Teams is part of Duran Group, operating from Bali, Malang, Solo and Haarlem. For privacy questions, write to legal@maua.ai.
What we collect
Only what the service needs: your name, email address, billing details and the content you send us to work on. If you request one of our papers, sign up for Maua 72 or ask for a scan, also the details in Paper requests and in Sign-ups and scan requests. On this website, visit statistics only if you accept them in the cookie bar (see Cookies).
Where your data lives
Everything you send us to work on is processed and stored on servers inside the European Union. No sub-processors outside the EU for that data, no data export, no shadow IT. The exceptions are paper requests, Maua 72 sign-ups and scan requests (see those sections), and website analytics, only if you allow it (see Cookies).
Paper requests
When you ask for one of our papers, we receive your name, your email address or WhatsApp number, the language you picked, the page you requested it on, and the campaign tags (utm) in the link that brought you, if there were any. We use them to send you the paper, to answer you if you write back, and to see which pages and campaigns bring requests in. Nothing else: no newsletter, no sales calls. The request passes through our form service (Vercel), the paper is emailed through Resend, and requests are kept in our lead list in Google Sheets. If you chose WhatsApp, we may send the paper from our WhatsApp account. These providers may process the data outside the EU. We delete requests from the lead list after 12 months; want yours gone sooner, write to legal@maua.ai.
Sign-ups and scan requests
When you sign up for Maua 72 or ask for an agent-ready scan, we receive your name, your email address, your organisation, your phone number if you give one, what you write about your problem or the address of your website, the language you picked, the page you sent it from, and the campaign tags (utm) in the link that brought you, if there were any. We use them to handle your sign-up or your scan, to contact you about it, and to send you the report. We do not put you on a newsletter. The request passes through our form service (Vercel), confirmation emails go through Resend, and requests are kept in our lead list in Google Sheets. These providers may process the data outside the EU. We delete requests from the lead list after 12 months; want yours gone sooner, write to legal@maua.ai.
How long we keep it
During your subscription, as long as delivering the service requires. After you cancel, we delete everything within 30 days, except what tax law obliges us to keep.
Your rights
Under the GDPR you can inspect, correct, delete, restrict and take your data with you. Send a request to legal@maua.ai and a human responds.
Cookies
Functional cookies, the ones the site needs to work, are always on. Google Analytics runs only if you click Accept in the cookie bar. It counts visits and which link brought you here, and Google may process that data outside the EU under the EU-US Data Privacy Framework. Decline and it does not load. Change your mind any time under Cookie settings at the bottom of every page: withdraw and it stops. No ad networks, no ad personalisation.
Security
Encryption in transit and at rest, regular security audits, and strict access control within our team. In case of a breach we inform the Dutch Data Protection Authority and you.
Questions?
Write to legal@maua.ai. A person answers, not a ticket system.