Privacy Policy

Introduction

This Privacy Policy explains how Mavik (“Mavik”, “we”, “us” or “our”) handles personal information in connection with our website at mavikcrm.com and our hosted customer relationship management service, including app.mavikcrm.com and company workspaces.

It applies when you visit our website, request information, create an account, use the service or communicate with us. Our Terms of Service address the conditions for using Mavik.

For account administration and our own business communications, Mavik determines how personal information is used. A company using Mavik determines how the personal information in its workspace is used; we process those records on its behalf, subject to its instructions and any applicable data processing agreement.

Definitions

• Service includes the Mavik website, hosted application and related services we operate.
• Personal data is information relating to an identified or identifiable person.
• Customer data is information a customer or its members submit to a workspace, including records, communications and files.
• Usage data is technical information about access to and operation of the service.
• Cookies are small browser files; similar browser storage can also retain session or preference information.
• A controller decides the purposes and means of processing personal data. A processor processes it for a controller.
• You means the person interacting with Mavik, or the organization they represent where the context requires.

Information We Collect

Information you give us. We receive details you enter in account, inquiry and support forms. These may include your name, email address, company, role, account preferences and correspondence. An early-access request may also include a fund-size range and an optional message. A paid service may require additional billing information.

Information in your workspace. Customers may store contact details, company profiles, deal information, correspondence, activity records, diligence materials and other business records. The customer is responsible for having an appropriate basis to collect and use that information. We process it to provide the service and carry out authorized instructions.

Information generated when you use Mavik. Requests to our services and hosting providers can generate IP addresses, device and browser information, timestamps, requested pages, error messages and other diagnostic records. These records help us deliver the service, investigate problems and prevent misuse.

Information from connections. If an available integration is enabled, we receive the account information and content you authorize its provider to share. This can include email or calendar information and credentials needed to maintain the connection. Imports, invitations and information submitted by your workspace administrator may also supply personal data.

Only submit sensitive information when you are authorized to do so and the service arrangements are suitable for that information. Avoid putting confidential deal details in a general website inquiry.

How We Use Your Information

We use information to provide Mavik, administer our relationship with you and protect the service. Depending on your interaction with us, this includes:

• Providing the service: setting up accounts, hosting records and keeping workspaces available.
• Operating features: enabling collaboration, searches, imports, exports and authorized integrations.
• Communicating with you: sending service notices, account updates and responses to inquiries.
• Providing support: investigating reported problems and helping you use the service.
• Improving Mavik: using operational information to understand performance and improve functionality.
• Protecting the service: detecting unauthorized access, fraud, spam and other abuse.
• Managing accounts and payments: handling invitations, recovery requests, purchases and agreed subscriptions.
• Sending product communications: sharing relevant news or offers where permitted, with a way to opt out.
• Following your instructions: completing requests and other purposes explained when you provide information.
• Meeting legal responsibilities: retaining required records, responding to lawful requests and protecting legal rights.
• Processing with consent: carrying out another clearly described use where your consent is required and obtained.

Where a legal basis is required, processing may be necessary for our agreement with you, our legitimate operational or security interests, a legal obligation, or your consent. A new purpose that requires consent will not begin without it. Customer data remains subject to the customer’s authorized instructions.

How We Share Your Information

Mavik does not sell or rent personal data, or disclose it for cross-context behavioral advertising. Information may be shared in the following circumstances:

• Service delivery. Providers supporting hosting, storage, communications and other contracted functions receive information needed for their work. Our website uses Netlify and our initial hosted CRM uses Railway. Inquiry delivery may use Resend or Airtable when configured. Provider access must be limited to the relevant service and subject to appropriate safeguards.
• Your choices. We disclose information to workspace members, integration providers or other recipients when an authorized user instructs us to do so, including through sharing, exports and webhooks.
• Business changes. Information may be involved in a merger, financing, reorganization or transfer of the business, subject to applicable confidentiality obligations and any required notice.
• Legal requirements and protection. We may make a disclosure required by law or reasonably needed to address fraud, security incidents, legal claims or threats to people’s rights and safety.
• Consent. We may disclose information for another purpose that we have explained and you have agreed to.

We do not give a service provider permission to use customer workspace records for its independent marketing. Contact us for information about the providers relevant to your account.

Cookies and Similar Technologies

Mavik uses session and browser-storage mechanisms to support sign-in, remember preferences and protect accounts. Hosting and security services may also process technical information needed to deliver a page or identify suspicious requests.

The marketing website does not include advertising trackers or third-party analytics scripts in its application code. Operational request records may still be kept by hosting providers. Information collected for service operation is not used to build cross-site advertising profiles.

You can manage cookies and storage through your browser. Clearing them may sign you out or reset a preference; blocking them may prevent parts of the service from working. Settings for an independent provider are controlled through that provider.

Data Security

We use technical and organizational safeguards appropriate to the information and service, including secure transmission, account authentication and access controls. Permissions and sharing settings help determine which workspace members can access particular information.

No system can eliminate every risk of loss or unauthorized access. Keep your credentials confidential and tell us promptly about suspected misuse. We will provide any incident notification required by applicable law or an agreed data processing arrangement. Specific security and recovery commitments are set out in the relevant customer agreement.

Data Retention

Personal data is retained while needed to provide the service, maintain the customer relationship or carry out the purposes described here. Some records may be kept longer to meet a legal obligation, resolve a dispute, prevent abuse or establish compliance with an agreement.

Workspace records are generally retained while the customer’s account is active and according to authorized instructions. You can use available controls to correct, export or delete records, or contact us for assistance. Subscription offboarding also follows the export and retention arrangements in our Terms of Service.

When information is no longer needed, we delete it or remove identifying details, subject to lawful retention requirements. Residual backup copies may remain until the applicable backup cycle ends; they remain protected and are not used for ordinary business activity.

Your Rights and Choices

The rights available to you depend on applicable law and the context in which your information is processed. They may include access to your information, correction of inaccuracies, deletion, a portable copy, restriction of processing, objection to certain uses and withdrawal of consent.

Where European data protection law applies, you may also raise a complaint with a supervisory authority. Withdrawing consent does not invalidate processing that took place lawfully before withdrawal.

Where California privacy law applies, you may request information about collection, use and disclosure, request correction or deletion, and exercise applicable rights concerning sale or sharing. You will not be treated unfairly for exercising a protected privacy right.

Send requests to support@chaocraft.com. We may verify your identity or the authority of someone acting for you. We respond within the applicable legal period and explain any restriction or extension. A request about company workspace records may need to be directed to that company as controller. Rights can be limited by legal obligations and the rights of others.

You may opt out of product communications through the instructions in a message or by contacting us. You may also revoke an integration’s authorization with its provider and use available disconnection controls.

International Data Transfers

Your information may be processed in a country other than the one where you live. The initial hosted CRM application runs in Railway’s US West region; website delivery and provider support may involve other locations.

Where cross-border transfer rules apply, the relevant processing must use a lawful transfer mechanism and appropriate protections, which may include approved contractual safeguards or an applicable adequacy framework. Contact us for details relevant to your workspace.

Links to Other Sites

Mavik may link to external websites, documents and connected services. Those providers determine their own collection and use of information. Review their policies before providing information to them; this policy describes Mavik’s processing and does not govern an independent website.

Children’s Privacy

The service is intended for business users aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has supplied information to Mavik, contact us so we can investigate and take appropriate steps to remove it.

Changes to This Privacy Policy

We may revise this policy when our services, information practices or legal obligations change. The current version appears on this page with its revision date. We will provide notice of material changes where required and obtain any additional consent required by law.

Contact Us

For questions about this policy or to exercise a privacy right, contact Mavik at support@chaocraft.com. Identify the relevant account or inquiry and describe your request. Please do not include passwords or confidential transaction documents in your initial message.