PRIVACY POLICY

MAAI Systems ("we", "us", "our"), operating from Madrid, Spain, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the General Data Protection Regulation (GDPR).

• Account Data:Email address and name provided during registration for authentication and account management.
• Interaction Data:Maritime queries, uploaded images, and interactions with our AI models.
• Payment Data:All payments are processed securely via Stripe. We do not store your credit card details on our servers; we only receive confirmation of payment.
• Technical Data:IP address, browser type, and device identifiers collected for security, rate-limiting, and preventing account sharing.

We process your data under the following legal bases:

• Performance of a Contract: To provide the AI services you purchased.
• Legitimate Interest: To prevent fraud, protect our intellectual property (RAG database), and improve our AI models.
• Legal Obligation: To comply with tax and accounting laws in Spain.

• To deliver AI-generated explanations and exam assistance.
• To manage your access pass (24h, 7d, or 1-month).
• To anonymize maritime queries for improving our specialized "Academy" knowledge base.
• To provide technical support and security updates via contact@martest.es.

We do not sell your personal data. We only share information with:

• Google Gemini AI: Queries are sent for processing. We take steps to ensure that personal identifiers are removed before transmission to AI models.
• Stripe: For secure payment processing.
• Cloudflare: For bot protection (Turnstile) and web security.
• Legal Authorities: Only when mandated by Spanish or EU law.

Your data is stored on secure, encrypted servers within the European Union (or regions providing equivalent protection). We implement industry-standard AES encryption and regular security audits to prevent unauthorized access.

As a user, you have the following rights:

• Access & Portability: Request a copy of your personal data.
• Rectification: Correct inaccurate information.
• Erasure ("Right to be Forgotten"): Request deletion of your account and all associated data.
• Object to Processing: Object to how we use your data for analytics.

To exercise these rights, contact us at contact@martest.es.

We use essential cookies strictly for:

• User authentication (keeping you logged in).
• Security and fraud prevention.
• Storing your preferences.

We do not use 3rd-party advertising cookies.

We store your data only as long as your account is active or as needed to provide services. Billing information is kept for the period required by Spanish tax law (typically 5-6 years).

We may update this Privacy Policy to reflect changes in law or our services. Users will be notified of significant changes via email or a site notification.