Privacy Policy

This Privacy Policy explains how MAA Tech ("MAA Tech," "we," "us," or "our") collects, uses, shares, and protects personal information. It applies to this website (maatechllc.com) and to the software products and technology services we build and operate for our clients, including lead-routing, messaging, automation, and clinic-management systems.

MAA Tech is a technology agency. In some cases we act as a controller of personal information (for example, information you submit directly to us through this website). In other cases we act as a processor or service provider that handles information on behalf of a client (for example, leads and messages we route into a client's own business system). Where we act on a client's behalf, that client's own privacy policy also governs how the data is ultimately used.

By using this website or any service we operate, you acknowledge the practices described in this policy. If you do not agree with it, please do not use the website or the services.

We use the information we collect to:

• Provide, operate, maintain, and secure our services and software products;
• Respond to your inquiries, requests, and support messages;
• Route leads and messages received through connected platforms into the appropriate client business system (for example, a CRM, clinic-management platform, or messaging inbox);
• Deliver, configure, and improve the services we provide to clients;
• Monitor performance, diagnose problems, and improve reliability and quality;
• Comply with our legal obligations and enforce our agreements.

Where required by law, we rely on one or more of the following legal bases to process personal information: your consent (for example, when you submit a form or opt in to communications); the performance of a contract with you or with a client; compliance with a legal obligation; and our legitimate interests in operating, securing, and improving our services, provided those interests are not overridden by your rights.

Where we process information on behalf of a client, the client is responsible for establishing the appropriate legal basis and for obtaining any consent required from the end users who submit information through their connected platforms. You may withdraw consent at any time where processing is based on consent; see Sections 8 and 13.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only in the following circumstances:

• Service providers and subprocessors. We use trusted vendors, such as hosting, infrastructure, analytics, and communication providers, that help us operate the service. They may access personal information only to perform work on our behalf and are bound by confidentiality and data-protection obligations.
• Our clients. Leads and messages we receive through connected platforms are delivered to the client for whom they were collected.
• Legal and safety. We may disclose information where required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of MAA Tech, our clients, or others.
• Business transfers. If MAA Tech is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Data obtained through Meta platforms is used only to provide the service our client has requested and is handled in accordance with Meta's Platform Terms and Developer Policies. We do not use data obtained through Meta platforms for unrelated purposes, and we do not sell it.

When a client connects a Meta platform (for example, Facebook or Instagram Lead Ads, or Facebook or WhatsApp messaging), we use the relevant Meta APIs to retrieve the lead and message information that end users submit through those channels. That information is delivered into the client's own business system, such as their CRM, clinic-management platform, or messaging inbox, so that the client can follow up with the person who reached out.

We use data retrieved through Meta APIs solely to provide this service on the client's behalf. We do not use it for any unrelated purpose, we do not resell it, and we do not use it to build advertising profiles. Our access to and use of Meta platform data is governed by Meta's Platform Terms and Developer Policies in addition to this Privacy Policy.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to provide the services, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it is held.

Where we process information on behalf of a client, we retain it for the duration of our engagement with that client and delete or return it thereafter in accordance with our agreement, unless a longer retention period is required by law. You may request deletion of your information at any time as described in Section 8.

You have the right to request deletion of your personal information. To request deletion, email ahmad@maatechllc.com with the subject line "Data Deletion Request". Please include enough detail for us to identify your information, such as the name, email address, or phone number you used, and the platform or form through which you contacted us or our client.

We will verify the request and delete the associated personal information within a reasonable period, unless we are required to retain it to comply with a legal obligation or to establish, exercise, or defend a legal claim. Where the information was submitted through a client's connected platform and is held in that client's own system, we will process the deletion on our systems and, where applicable, forward the request to the relevant client so it can be actioned in theirs.

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include access controls that limit who can view data, encryption of data in transit, and restricting production access to authorized personnel on a need-to-know basis.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will respond in accordance with applicable law.

MAA Tech builds and operates software products, including Clinicos, a clinic-management platform. Any health, clinical, or patient data processed through such products is kept strictly separate from marketing and advertising data. It is access-controlled and is never shared with advertising or communications platforms.

Our practices for handling clinical data are designed with healthcare privacy principles in mind. We do not, however, claim any specific certification or accreditation (such as HIPAA or ISO certification) unless we have stated so explicitly in a signed written agreement with the relevant client. Where a client is subject to healthcare regulations, the specific terms of our data handling are set out in the agreement between MAA Tech and that client.

MAA Tech operates from Pakistan and works with clients and service providers located in other countries. As a result, your personal information may be transferred to, stored in, or processed in a country other than the one in which you are located, and that country may have data-protection laws that differ from those of your jurisdiction.

Where such transfers occur, we take steps to ensure that personal information continues to be protected in a manner consistent with this policy and applicable law, including through appropriate contractual safeguards with the service providers who process it.

Our website and services are directed to businesses and are not intended for children. We do not knowingly collect personal information from children under the age of 18 (or under the minimum age required by applicable law in your jurisdiction, such as 16 in parts of the EU). If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Depending on your location, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information (see Section 8);
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Request a copy of your information in a portable format, where applicable.

To exercise any of these rights, email us at ahmad@maatechllc.com. We will respond within the time frame required by applicable law. Where your information was submitted through a client's connected platform, we may direct your request to, or coordinate with, the relevant client, who acts as the controller of that data.

This website uses cookies and similar technologies to keep the site functioning, remember your preferences, and understand how the site is used through basic analytics. You can control or disable cookies through your browser settings; if you do, some parts of the site may not function as intended. We do not use cookies to sell your personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice. Your continued use of the website or services after an update takes effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at:

MAA Tech
ahmad@maatechllc.com