Privacy policy

What we collect

• Account details from Google when you sign in: your name, email address, profile picture and a user ID. We never see your Google password.
• What you give us to write a paper: your idea, notes, findings, the sources you choose, and an author name and affiliation if you add them.
• What we create for you: previews, drafts, revision history, and the PDF, Word and LaTeX files.
• Use of the service: when you create or revise a paper, how many credits you hold and use, and basic technical logs (such as time, browser type and IP address) kept by our hosting provider.
• Payments, when online payment opens: the payment gateway collects your payment details. We receive the result, the amount and a reference, not your card or UPI credentials.
• Messages you send us by email.

We do not use advertising pixels, ad trackers or analytics cookies today. The sign-in feature stores a session in your browser so you stay signed in. While you are signed in we keep a simple count of which steps of the new-paper form you reach (for example “idea done”), so we can fix steps that confuse people. It holds none of the text you write.

Why we use it

• To run the service you asked for: sign you in, create and store your papers, apply credits and let you download files.
• To keep the service safe and fair: prevent abuse, enforce limits and fix faults.
• To answer your messages, handle refunds and meet legal and accounting duties.
• To understand, in totals, how the service is used so we can improve it.

We rely on your consent, given when you sign in and submit content, and on uses that the law permits for these purposes. You can withdraw consent by deleting your content or your account.

Who receives your data

We do not sell your personal data. We share it only with providers who help us run the service:

• Google: sign-in (Firebase Authentication), our database and file storage, the servers that run the service (Google Cloud), and the Gemini AI service. To write your paper, the text you provided is sent to the Gemini API and the result comes back. If you paste your own reference list, the lines that no registry can confirm are also read by the Gemini API, only to pick out authors, year and title.
• Public scholarly databases and DOI registries (Crossref, OpenAlex, Europe PMC and, as back-ups, PubMed, DOAJ, OpenAIRE, arXiv and DataCite): they receive search terms taken from your idea, including the first part of your idea text, and any DOIs or references you paste or add, so we can find and check real papers. They do not receive your name or email.
• A payment gateway, when online payment opens.
• Authorities, if the law requires us to disclose information.

Your servers and files are in Google Cloud in the United States (region us-central1), so your data is transferred outside India.

How long we keep it

• Papers and previews are kept until you delete them. When you delete a paper, its record and its stored files are deleted.
• Word and LaTeX downloads are removed automatically 7 days after they are created.
• Technical logs are kept for about 30 days.
• Credit and payment records are kept for as long as accounting and tax law require.
• If you ask us to delete your account, we delete your account data and papers within 30 days, except records we must keep by law.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, or explain how it is used. You can nominate someone to exercise these rights for you if you die or become unable to. To use any of them, email hello@mayavis.com from the address you signed in with. We reply within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Security

Papers are stored privately, access is checked on every request, downloads use short-lived links, and traffic is encrypted. No system is completely secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

Children

The service is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, email us and we will delete it.

Changes

If we change this policy we will update the date above and tell you in the app or by email when the change matters.

Grievance officer and contact

The Director, Mayavis Private Limited
Mayavis Private Limited, CIN U62011UW2026PTC250878
Uttar Pradesh, India
Email: hello@mayavis.com

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.