01Who is responsible for your data
The data controller is MAWATYNKI LIMITED, 81 Arundel Road, NR30 4LD, United Kingdom. You can reach our privacy contact at support@mawatynki.shop or +44 7404807810.
Mawa Listing Studio is an online-only digital SaaS; no physical goods or shipping. We do not sell physical goods and do not operate any in-person service.
02What we collect
- Account data: name, email address and password credentials.
- Subscription data: plan, billing period, and payment status returned by our payment processor. We never receive or store your full card number.
- Workspace inputs: product names, features, descriptions and any files or reference images you choose to upload.
- Generated outputs: the listing copy, images and reels produced from your inputs.
- Support data: messages you send us through the contact or onboarding forms.
- Technical data: IP address, device and browser type, and basic usage events needed to run and secure the service.
03Collection sources (where the data comes from)
We collect personal data from the following collection sources:
- Directly from you: when you create an account, use the workspace, enter product details, upload a file, subscribe or contact us.
- Automatically: technical and usage data collected by our hosting and security infrastructure as you use the service.
- From our payment processor: payment and subscription status returned by Stripe after you check out.
- From service providers acting on our behalf: email delivery and AI generation providers that process data to deliver the service.
04Why we use it and our legal bases
- To provide the workspace (performance of our contract with you): generating and storing your listing assets.
- To take payment and manage subscriptions (contract): processing plans through our payment processor.
- To keep the service secure and prevent abuse (legitimate interests).
- To provide support (contract / legitimate interests).
- To send service and, where you opt in, marketing messages (consent, which you can withdraw at any time).
- To meet legal and tax obligations (legal obligation).
05Payment boundary
Card payments are processed by Stripe on Stripe-hosted checkout pages. Your full card number, CVC and full card details are entered directly with Stripe and are never transmitted to or stored on our servers. We receive only the outcome of the payment (success, failure, refund or dispute) and limited billing metadata such as the last four digits and card brand.
06How we handle AI user input, generated results and file uploads
- User input: the product names, features, descriptions and prompts you type into the workspace are processed only to generate the assets you request.
- File uploads and sample data: any reference images, files or sample data you upload are used only to produce your requested output, cached for up to 30 days to support regeneration, and then deleted.
- Generated results: the listing copy, images and reels produced from your input are stored so you can access and export them, and are deleted when you delete them or your account.
We do not use your user input, file uploads, sample data or generated results to train AI models. You can delete your input, uploads, generated results or your whole account at any time, and we will remove the associated data other than records we must keep for legal or accounting reasons.
07Who we share it with
- Hosting and infrastructure provider that runs the application.
- Payment processing (Stripe) for subscriptions, refunds and disputes.
- Email delivery provider for account and support messages.
- AI generation provider that renders images and text from your prompts, where you enable AI rendering.
- Professional advisers and authorities where required by law.
08International transfers
Some processors may store or process data outside the UK or EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) to protect your data to an equivalent standard.
09How long we keep it
Account and subscription records are kept for the life of your account and for as long as required for tax and legal purposes afterwards. Uploaded reference files are kept for up to 30 days. Support messages are kept for up to 24 months. You may request earlier deletion.
10Security
We use encryption in transit, access controls, and reputable processors. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data and will notify you and any regulator of a qualifying breach as required by law.
11Your rights (UK GDPR / EU GDPR)
- Access a copy of your data.
- Correct inaccurate data.
- Erase data (the right to be forgotten).
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.
12Your rights (CCPA) and Do Not Sell or Share
If you are a California resident, you may request access to and deletion of your personal information and are protected against discrimination for exercising these rights. We do not sell or share your personal information for cross-context behavioural advertising. To exercise any right, contact support@mawatynki.shop.
13Cookies and analytics
We use essential cookies to run the service and sign you in, and limited analytics to understand usage. See our Cookie Policy for detail and controls.
14Automated decisions and children
We do not make solely automated decisions that produce legal or similarly significant effects about you. Mawa Listing Studio is intended for business use by adults. It is not directed to children, and we do not knowingly collect data from anyone under 16. If you believe a minor has provided data, contact us and we will delete it.
15Changes and contact
We may update this policy and will change the date above when we do. Questions or requests: support@mawatynki.shop, +44 7404807810, 81 Arundel Road, NR30 4LD, United Kingdom.