PRIVACY POLICY

1. Who We Are
Maya Energy, Inc ("Maya Energy," "we," "us," or "our") converts run-out aviation turbines into power generation engines for data centers and the electric grid. We are based in San Francisco, California. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit www.maya.energy (the "Site"), contact us, do business with us, or apply to work with us. By using the Site, you acknowledge the practices described here. This policy does not cover information we handle under a separate written agreement, such as a customer, supplier, or engine acquisition contract. Those agreements govern that information.

2. Information We Collect
We collect only the information we need to respond to you and run our business. We do not sell personal information.
• Contact and business details, such as your name, email, phone, company, and message, which you provide through the Site's contact form, by email, or in meetings.
• Business relationship information, such as details about engines, sites, projects, or power needs, and contract and billing contacts, which you or your company provide.
• Job application information, such as your resume or CV, work history, education, portfolio, references, and location, which you, recruiters, or referrals provide (see Section 6).
• Device and usage data, such as your IP address, browser type, device type, and the pages you request, which we receive automatically when your browser loads the Site (see Section 4).
• Communications, meaning the emails and messages you send us.
We do not intentionally collect sensitive personal information (such as Social Security numbers or financial account numbers) through the Site. Please do not send it to us unless we specifically request it for a legitimate purpose, such as onboarding a hire.

3. How We Use Information
We use personal information to:
• Respond to inquiries and requests for information
• Evaluate and carry out business relationships with customers, suppliers, engine sellers, partners, and investors
• Review job applications and recruit for open roles
• Operate and secure the Site
• Send business updates you have asked to receive, if applicable
• Comply with legal obligations, including export control, sanctions, and know-your-customer screening
• Protect our rights, property, and safety, and those of others
We do not use personal information for automated decisions that produce legal or similarly significant effects on you.

4. Cookies and Technical Data
The Site does not use cookies. Our website platform, Webflow, does not add cookies to the sites it hosts, and we have not installed analytics, advertising, or tracking tools.
Like any website, the servers that deliver the Site and its content, including Webflow and the provider that hosts our background video, automatically receive basic technical information such as your IP address and browser type when your browser requests a page. We do not use this information to identify you.
If we add cookies or analytics in the future, we will update this policy before doing so and, where required, ask for your consent.
We honor Global Privacy Control (GPC) signals as a request to opt out of any sharing of personal information.

5. How We Share Information
We do not sell personal information or share it for cross-context behavioral advertising. We share it only as follows:
• Service providers that host the Site and receive contact form submissions (Webflow), and that provide email, CRM, file storage, and applicant tracking, under contracts that limit their use of the data.
• Professional advisors such as lawyers, accountants, and auditors, under confidentiality duties.
• Business partners and contractors, including our engineering contractors, when needed to evaluate or deliver a project you are involved in.
• Legal and safety reasons, when required by law, subpoena, or government request, or to prevent fraud or harm.
• Business transfers, such as a financing, merger, acquisition, or sale of assets. The recipient must protect the information consistent with this policy.
• With your consent or at your direction.

6. Job Applicants and Contractors
When you apply for a role or contractor engagement, we use your information to assess your qualifications, communicate with you, check references, and meet legal requirements. Hiring decisions are made by people, not automated systems.
We keep applications for up to [2] years so we can consider you for future roles, unless you ask us to delete yours sooner. If you are hired or engaged, your information becomes part of your personnel or contractor file, governed by a separate notice.
California applicants: we provide a separate notice at collection describing applicant data and your rights under California law.
 
7. Retention and Security
Retention. We keep personal information only as long as needed for the purposes above, or as required by law, tax, or contract. Business contact records are kept for the life of the relationship plus [3] years. Contact form submissions are deleted from Webflow after 12 months; any we keep as business records follow the rule above. When a retention period ends, we delete or anonymize the information.
Security. We use reasonable administrative, technical, and physical safeguards, including access controls, encryption in transit, and vendor security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Privacy Rights
You can contact us at any time to ask what information we hold about you, correct it, delete it, or stop receiving marketing emails. Every marketing email includes an unsubscribe link.
California residents. Depending on whether the California Consumer Privacy Act, as amended by the CPRA, applies to Maya Energy, you may have the right to:
• Know what personal information we collect, use, and disclose, and get a copy of it
• Correct inaccurate personal information
• Delete personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information (we do neither)
• Limit the use of sensitive personal information (we do not use it for purposes that trigger this right)
• Not be discriminated against for exercising these rights
To make a request, email privacy@maya.energy with the subject line "Privacy Request." We will verify your identity by matching information we already hold, and respond within 45 days. An authorized agent may submit a request on your behalf with your signed permission.
Other locations. If you live in another U.S. state or country with privacy laws, you may have similar rights. Contact us and we will honor them as required by law.

9. Children, Changes, and Contact
Children. The Site is intended for business audiences and is not directed to children under 16. We do not knowingly collect their personal information. If you believe a child has sent us information, contact us and we will delete it.
Third-party links. The Site may link to other websites. We are not responsible for their privacy practices.
Changes to this policy. We may update this policy from time to time. We will post the new version here and change the "Last updated" date. If a change is significant, we will give additional notice on the Site.
Contact us.
Maya Energy "Maya Energy, Inc”, San Francisco, CA. Email: privacy@maya.energy