Mazaal AI

GDPR overview

There is no GDPR implementation to report. The privacy policy is written entirely under Australian law: it invokes the Australian Privacy Principles of the Privacy Act 1988 (Cth), and the terms place the contract under the law of New South Wales. Across the twelve pages collected, the letters GDPR appear nowhere a reader can see them. No Article 27 representative is named, no Data Processing Agreement is published or offered, and no subprocessor list exists. Data subject rights are handled informally: access and correction on request by email to support@mazaal.ai, answered within a reasonable timeframe. One caveat deserves stating plainly — a claim of GDPR compliance does exist inside the site's JavaScript bundle, in a translation dictionary rendered on no page. It has not been treated here as a published commitment.

Who owns the data?

Clause 6.2 of the terms is explicit: you keep every right in your User Data, defined as anything you upload or create while using the platform. In exchange you grant Mazaal AI a licence to use, store and process that data in order to provide and to improve the Solution — the second verb is the one worth noting, because improvement is nowhere bounded in the document. Mazaal AI, for its part, keeps all intellectual property in the platform itself. The privacy policy states that personal information may reach employees and contractors, third-party service providers, and government agencies where the law requires it. No further limit on internal reuse is published.

Reuse rights

You keep your own material and may reuse it freely: nothing in the terms restricts what you do with the content you upload or with the output your agents produce, and no attribution or licensing condition is placed on you. The restrictions run the other way. Clause 4.3 forbids reverse engineering, modifying or building derivative works from the platform, and clause 6.1 keeps every intellectual property right in the Solution with Mazaal AI. On the vendor's side, one commitment is spelled out and only one: data reached through the Google Workspace APIs — Gmail, Drive, Calendar, Documents, Forms, Spreadsheets, Tasks and Contacts — is never used to develop, improve or train AI or machine-learning models, is processed solely for the purposes you authorise, and is never aggregated for generalised model training. For every other category of customer data, no general statement about model training is published anywhere on the site.

Data retention & training

Hosting summary

Mazaal AI publishes nothing about where customer data is hosted. The privacy policy describes security measures — encryption in transit and at rest, regular audits and vulnerability assessments, access controls, staff training — but names no country, no region and no cloud provider, and offers no data-residency option. The terms are silent as well. Jurisdiction is the one firm point: the contract is governed by the law of New South Wales, Australia, with exclusive jurisdiction in the New South Wales courts, and the privacy policy operates under the Australian Privacy Principles of the Privacy Act 1988 (Cth). Two technical facts sit alongside, and neither is a hosting commitment: the marketing site resolves to 94.130.111.148, an address belonging to Hetzner Online GmbH in Nuremberg, Germany, and the domain is registered through NameCheap in the United States. Both describe the public website, not the platform holding customer data. Anyone with a residency requirement will have to ask the vendor directly.