Last updated: 25th August 2026

Mavic Pte Ltd (UEN 202335906M), 68 Circular Road #02-01, Singapore 049422 (“Mavic”, “we”, “us”) provides the Mavic platform, an AI marketing platform, and operates the website at https://mavic.ai.

This policy explains what we do with personal data.

1. Who this policy covers

This policy applies to visitors to our website, to people who hold an account on the Mavic platform (app.mavic.ai), and to individuals whose personal data appears in content processed on the platform.

2. Our two roles

As controller — our website and our own marketing. When you browse mavic.ai, contact us, or sign up to Mavic platform, sections 3 to 6 apply.

As processor — content on the platform. When a customer uploads content to the Mavic platform, or generates content using it, we are the processor. Section 7 applies, and where the customer has a written agreement with us, that agreement governs.

3. Information we collect

From website visitors: name, email address, company, and anything you choose to tell us; and usage data including IP address, browser type and version, pages visited, time and date of visit, time spent on pages, device identifiers and diagnostic data.

From account holders: name, work email address, company, role, billing contact details, and records of your use of the platform, including which features you use and how many AI credits you consume.

Payment information is collected and processed by Stripe. We do not store card numbers.

Cookies and similar technologies are used to operate the site and understand how it is used. You can instruct your browser to refuse cookies; some parts of the site may then not function.

4. How we use information

We use personal data collected in our controller capacity to provide and maintain the service; to create and administer accounts; to provide customer support; to send service and administrative messages; to invoice and collect payment; to monitor usage and improve the service; to detect, prevent and address technical issues and misuse; to comply with legal obligations; and, where permitted, to send marketing communications and to target and retarget advertising.

Advertising and marketing use applies only to data collected from visitors to our website and from our own marketing activities. We never use customer content, generated content or platform usage data for advertising, retargeting, or any marketing purpose.

5. Legal bases and consent

Where we rely on consent — for marketing email, and for non-essential cookies — you may withdraw it at any time, by using the unsubscribe link in any marketing message or by writing to hello@mavic.ai. Otherwise we process personal data because it is necessary to provide a service you have asked for, to comply with a legal obligation, or for our legitimate interests in operating and improving our business, where those interests are not overridden by your rights.

6. Sharing and service providers

We share personal data with service providers who process it on our behalf, under contract and only for the purposes we specify. Our current service providers include:

We may also disclose personal data where required by law, court order or a regulator; to protect our rights, property or safety, or those of our users; and to a buyer or successor in the event of a merger, acquisition or sale of assets, subject to this policy continuing to apply.

We do not sell personal data.

7. Customer content on the platform

This section applies to content our customers upload to the platform (“Customer Content”) and to material the platform generates for them (“Generated Content”).

We do not use Customer Content, Generated Content, or a customer’s platform usage data to train, fine-tune or improve any artificial intelligence model, whether our own or a third party’s. We do not disclose any of it to any other customer.

We process Customer Content only to provide the platform to the customer, to provide support at their request, and where required by law.

Generative features are delivered using third-party AI model providers. When you use one of those features, the content you submit is transmitted to the provider behind the model you have selected, in order to produce a result.

Our current AI model providers are:

We use these providers on terms under which content submitted through their interfaces is not used to train their models. The processing location for each provider, and details of the terms we hold with them, are available to customers on each provider’s owned platforms.

You choose which model to use. The platform lets you select the AI model for each generation, and your content is sent only to the provider behind the model you select. We do not send your content to a provider you have not chosen.

Where the customer is the controller, requests from individuals about their personal data should be directed to that customer. We will assist them in responding.

8. Retention

We retain personal data collected in our controller capacity for as long as necessary for the purposes set out in this policy, and thereafter as required for legal, accounting or reporting obligations. Usage data is generally retained for a shorter period, except where used to strengthen security or improve functionality.

Customer Content and Generated Content are retained for three months after an account or agreement ends, so that the customer can export them, and are then deleted unless the law requires us to keep them. On request during that period we will provide a complete export in a standard, machine-readable format. Where a customer’s written agreement specifies a different period, that agreement applies.

9. International transfers

We and our service providers process personal data outside Singapore, including in the United States and the European Union. Where we transfer personal data out of Singapore we take reasonable steps to ensure the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that under the Personal Data Protection Act 2012, as required by that Act. Where the General Data Protection Regulation applies, we rely on appropriate safeguards including standard contractual clauses.

10. Security

We use commercially reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify affected customers without undue delay on becoming aware of any unauthorised access to or disclosure of their data.

11. Your rights

Subject to applicable law, you may request access to the personal data we hold about you; ask us to correct it; ask us to delete it; withdraw consent; object to or restrict certain processing; and request a copy in a portable format. Where the General Data Protection Regulation applies, you also have the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, write to hello@mavic.ai. We will respond within the period required by applicable law. Where the data concerned is Customer Content, we will refer you to the relevant customer, who is the controller.

12. Children

The platform and the website are not directed to individuals under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to hello@mavic.ai and we will delete it.

13. Other websites

The website contains links to sites we do not operate. We are not responsible for their content or privacy practices, and this policy does not apply to them.

14. Changes to this policy

We may update this policy. We will post the updated policy on this page and change the “last updated” date.

Where a change materially reduces the rights, or increases the obligations, of a customer holding a paid account, we will give at least 30 days’ notice before it takes effect — by email to account administrators and by notice in the platform. Other changes take effect when posted.

Where a customer has a written agreement with us, no update to this policy reduces that customer’s rights or increases its obligations under that agreement.

15. Enterprise customers

We provide a data processing addendum on request, together with our current sub-processor list and information about our security practices. Write to hello@mavic.ai.

16. Governing law

This policy is governed by the laws of Singapore.

17. Contact

Mavic Pte Ltd 68 Circular Road #02-01, Singapore 049422 hello@mavic.ai