Privacy Policy - Maihao AI

This Privacy Policy explains how Maihao AI collects, uses and protects personal information when providing digital products and related services, and how you can exercise your rights.

Last updated: October 12, 2026

1. Scope

This policy applies to our processing of personal information when you browse Maihao AI, register or manage an account, purchase digital products or request support. Independent third parties are responsible for their own processing under applicable law. This does not exclude our responsibility for our own processing.

2. Information we process

We process information for specified purposes and limit it to what is necessary for the relevant service:

Account information: your email address, account identifiers and authentication details, for registration, sign-in, account management and security. Third-party sign-in involves the basic account information you authorize that provider to share.
Transaction and delivery information: order numbers, product specifications, amounts, payment status, transaction evidence and delivery records, for payment reconciliation, fulfillment and support. Target account details are processed only when needed for delivery.
Support information: contact details, issue descriptions and necessary evidence you submit, for answering inquiries, handling complaints and resolving disputes.
Access and device information: IP addresses, browser and device details, access times and necessary logs, for operating the service, troubleshooting, security and performance analysis.

Depending on applicable law, processing is based on your consent, what is necessary to enter into or perform a contract, legal obligations or another lawful basis. We provide additional notice and follow the required procedures for new purposes or processing that requires separate consent. Declining unnecessary information does not prevent access to basic services.

3. Credentials and browser storage

Do not submit passwords, verification codes, session credentials or full payment details in public areas or unnecessary communications. Where account information is needed to fulfill a service, provide only the information expressly required. Keep delivered accounts, redemption codes and other credentials secure.

We use cookies or local storage to maintain sign-in, save carts and language preferences, and support necessary security and performance functions. You can manage or clear this data through your browser. Doing so may affect some features but does not automatically delete stored account or order records. We seek consent separately for non-essential processing where required by law.

4. Service providers and disclosures

Infrastructure, security, payment, authentication, fulfillment and customer service providers may process necessary information to help us deliver the service. We specify processing limits and protection requirements as required by law. When providing personal information to an independent controller, we meet applicable notice, consent and other requirements.

We do not operate a business of selling personal information. Disclosures required by law, valid law-enforcement requests or the lawful resolution of transaction disputes are limited to what is necessary.

5. Retention and security

Information is kept only for as long as needed for its purpose. Account information is generally retained until the service ends or the account is closed. Order, payment and support records are retained as needed for transactions and statutory retention requirements. We then delete or anonymize the information as required by law; further processing of backups that cannot yet be deleted is restricted.

Some service data is stored in Taiwan, and related services may involve processing in other countries or regions. For cross-border processing requiring additional notice, consent or safeguards, we provide the required recipient details and rights procedures and meet the applicable obligations.

We use reasonable protections, including encryption in transit and access controls. If a personal information security incident occurs, we take remedial measures and provide notifications or reports as required by law.

6. Your rights

Subject to applicable law, you may request access to, copies of, corrections to, additions to or deletion of your information, withdraw consent, close your account and ask for an explanation of our processing rules. Contact us using the details below. We perform necessary identity checks and respond within the period required by applicable law.

Withdrawal of consent does not affect earlier lawful processing. Transaction records that must be retained by law are restricted to the relevant necessary purposes. If we cannot fulfill a request, we explain why. You may also exercise your rights directly with an independent third party that processes your information.

7. Minors

Minors should use the service under a guardian's guidance. When processing personal information of children under 14, we obtain guardian consent and apply necessary safeguards as required by law. Guardians may contact us if a child's information has been submitted improperly.

8. Updates and contact

We may update this policy to reflect service or legal changes and show the revision date on this page. Material changes receive appropriate notice. Where renewed consent is required, continued browsing does not replace that consent.

Privacy inquiries and rights requests: [email protected]. For purchasing and after-sales rules, see our Terms of Service.