Privacy Policy
Maia chatbot

Exzy Company Limited Company Limited (the “Company”) is the owner and the developer of Maia chatbot (the “Service”). By signing up and registering to be the user to use the service of Maia (“User”), the User acknowledges and understands that the Company would need to process the personally identifiable information (the “PII”) of such particular User. Thus, the Company announces this Privacy Policy to notify the User of the rights and obligations as well as the conditions for the collection, use, process and disclosure of the User’s PII in performing the Service.

This Privacy Policy is only applicable to the use of the Service and shall not apply to the PII process undertaken by other application or website developed and operated by any other third-party that the Company does not have any control over (the “Third Party”) despite being displayed or connected to the Service. The User understand and agree that the User shall study and agree on the privacy policy announced by those Third Party that are separated from this Privacy Policy.

If the User does not accept this Privacy Policy and any amendment thereof, the Company reserves the rights to refrain from providing the Service to such User because the PII processing defined hereunder are critical for the provisions of the Services by the Company to the User. By continuing to use the Service, the relevant User shall be deemed to always accept and agree to the Privacy Policy.

The Company may amend or revise this Privacy Policy at any time to assure the compliance with the relevant laws and regulations and to assure the updates in the Service at any time; provided that the Company will communicate the amendments or revisions made to the User and the amendment or revisions shall become effective once being communicated.

PII being Processed by the Company in the performance of the Service
In order to perform the required Services, the Company would need to collect and process the following PII from the User:

1. Directly Identifiable PII such as name, age, nationality and date of birth
2. Users’ company email address, username
3. Transactional data, such as username – password and logs, transaction number and history that the User transact and use the Service,
4. Technical PII such as the Service usage information, and application status and setting that have been used to connect to the Service.

Objectives for PII Process

1. The Company would need to collect, restore and use the PII of the User in order to perform any Services as defined under the terms of service, including without limitation to verify the identity and eligibility of the User; to validate the payment conditions for any Service fee (if any); to monitor the transaction executed by the User; and to contact the relevant Use;
2. The Company would need to collect and analyze the PII of the User on behalf of the user’s organization in order to assess the resource usage with an aim to define asset allocation strategy and asset utilization to the user’s organization.
3. The Company would need to collect and restore the User’s PII in order to provide other support services after the Service delivery such as in activity log for troubleshooting and maintenance purposes.
4. The Company may need to collect and restore the User’s PII as obliged under the applicable laws and regulations purpose.
5. The Company needs to show the user’s name on the display that is attached to the asset. The purpose is only for announcing that the booking assets have been dedicated to the users who booked. This is to promote fair usage in the user’s organization based on its organization policy.

The Company intends to store the PII of each relevant User for throughout the period of time that the User is still the registered User and for 3 (three) years after the User’s termination for the legitimate interest of the Company in the legal proceedings that the Company may have against the relevant User; provided that in case that the relevant laws requires the storage of the PII for the longer period than defined, the Company may need to do so.

Disclosure of the PII
In order to assure the performance of the Service as committed, the Company may need to disclose the User’s PII in the following circumstances:

1. To disclose the User’s PII to the outsourced service providers engaged in the performing any direct support service in the Service performance by the Company to the User, including without limitation the advisors as well as the third party service provider (i.e. logistic service provider); provided that the Company shall only disclose the User’s PII strictly on the need to know basis only;
2. To disclose the User’s PII in the usage of the storage service on Computer System Amazon AWS, Microsoft Azure. Except that the user’s organization has a policy to deploy the application inside the organization’s infrastructure.
3. To disclose the User’ PII to third party in the legal proceedings to protect the Company’s legitimate rights or to detect and prevent any fraud on the Platform; provided that such disclosure shall be done on the limited and specific purposes as defined only;
4. In case that the Company is obliged under the applicable laws, court judgment or administrative order to disclose any PII of any particular users, the Company would need to do so.

What are Cookies that the Company is using in Service Performance?
Cookies are text files stored on the User’s computer browser directory or program data subfolder in order to keep data log of the User’s internet usage and the User’s behavior or interaction when using the Service. For the good performance of the Service, the Company need to use various types of Cookies for various purposes as defined below:

1. Functionality Cookies being used to record information about choices the User have made when using the Service such as personal settings, languages, and fonts so this would allows the Company to tailor the Service that would match the User’s preference setting;
2. Strictly Necessary Cookies are essential for the User to browse and use the Service and to use its features, such as accessing secure areas of the Service system or interface.

Even though the use of Cookies would enhance the performance in providing Services to the User, the User shall be entitled to disable the Cookies setting on the User’s browser at their own will; provided that the User shall acknowledge that the Cookies-disabled setting may impact the efficiency and the performance of the Service as defined in details for each type of Cookies above.

Representation on the Privacy Security
The Company represents and guarantees that the Company shall use the most appropriate security measures to prevent the unauthorized access, amendment or disclosure of the PII in any form or in any circumstance by either internal or external persons and the Company commits to review those measures on the regular basis with the strong commitment to be in strict compliance with the applicable laws.

Data Subject Rights
The Company acknowledges and accepts the User’s rights as the data subject over their PII as defined under the applicable laws that include the following rights:

1. Right to access; to request for copy; and to rectify or update their own PII;
2. Right to request for data portability of the PII that the Company has processed in the readable forms by the tools or automatic mechanics to other data controller;
3. Right to object to the PII process being undertaken;
4. Right to request for the erasure or de-identification of any PII that does not have any necessary basis to process, i.e. after the consent withdrawal;
5. Right to request to suspend the PII processing in case that request for erasure is being exercised or it is unneccessary to process such PII;
6. Right to withdraw consent that has been given.

The Users can contact their company (as the data controller) in order to make the request to exercise any defined rights through the defined channel without any charge and the Company will consider and notify the User of the Company’s determination within 30 days after the receipt of the User’s valid request.

Contact Us
Data Processor
Name: Exzy Company Limited
Contact detail: 026900779
Email address: contact@exzy.me