Legal

Privacy Policy

What we collect, why, and the controls you have.

Last updated: 12 July 2026 · Draft — under owner review

This policy describes how PremiumAV Private Limited (Maya Software Technologies), New Delhi, India processes personal data for the MayaPDF service at pdf.maya123.com, in line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

1. The privacy-by-design part first

Page tools and OCR run entirely in your browser. When you merge, split, watermark, crop, convert, or OCR a document with the in-browser tools, that file is not uploaded to our servers. It never leaves your device unless you explicitly save it to your account.

2. What we collect

  • Account data: name, email address, password (stored as a one-way hash), language preference.
  • Documents you save: PDFs you upload to your account library or send through e-sign workflows, plus their metadata (filename, size, SHA-256 checksum, page count).
  • Signature assets & certificates: signature images/blocks you save, and certificates you generate. Certificate private keys are stored encrypted (AES-256-GCM).
  • E-sign records: signer name, email, signing timestamps, IP address and browser user-agent — collected to build the tamper-evident audit trail that gives an e-signature its evidentiary value.
  • Security logs: login attempts (email, IP, success/failure) for rate-limiting and account protection.

3. Cookies

We use one session cookie, required to keep you signed in. No advertising or cross-site tracking cookies, and no third-party analytics scripts.

4. How we use data

  • To provide the service: storing your documents, running e-sign workflows, sending signer invitation emails.
  • To secure the service: rate-limiting, abuse prevention, audit trails.
  • To respond when you contact us.

We do not sell personal data, serve ads, or use your documents to train AI models.

5. Sharing

Data is shared only with: (a) our hosting provider, which stores data on our behalf; (b) our email delivery provider, to send transactional emails such as signer invitations; (c) our payment partner (Razorpay) if and when you make a payment — we never see or store your card details; and (d) authorities where the law requires.

6. Retention & deletion

Documents and signature assets stay in your account until you delete them or delete your account. Deleting a document removes the stored file. Audit-trail and security-log entries may be retained for a limited period where needed for legal or security purposes. To delete your account and its data, contact us at the address below.

7. Security

  • All traffic is encrypted in transit (HTTPS/TLS).
  • Certificate private keys are encrypted at rest (AES-256-GCM).
  • Passwords are stored as salted one-way hashes, never in plain text.
  • Application secrets and stored files live outside the web-accessible root.

8. Your rights

You may access, correct, or delete your personal data — most of it directly from your account, or by writing to us. You may also withdraw consent for processing that relies on it, and complain to the Data Protection Board of India if you believe your rights are infringed.

9. Grievance officer

Draft — Grievance officer name is being confirmed and will be published here. Until then, write to maya@maya123.com with "Grievance" in the subject line; we acknowledge within 48 hours.

10. Contact

PremiumAV Private Limited (Maya Software Technologies), Flat 804-A, Manjusha Building, 57 Nehru Place, New Delhi 110019 · maya@maya123.com