Privacy policy
Last updated 29 October 2026
This policy explains what personal data Mavix Marketing collects through our audit pages, why, who we share it with and your rights under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Mavix Marketing is the "data fiduciary" for this data.
Who we are: Mavix Marketing, 1st Floor, 126 Cabin-101, NH-19, CRRI, Ishwar Nagar, Okhla, New Delhi 110044, India. Email hello@mavixmarketing.com.
1. What we collect
- What you type in the form: name, email, website and WhatsApp number.
- Optional answers on the thank-you page: your role, how most of your customers find you, and your city.
- Conversations: WhatsApp messages, emails, and notes from calls with you.
- Booking details if you book a call: name, email, time and anything you add.
- How you found us: the ad, campaign and search term that brought you (UTM tags and Google click IDs such as gclid), the page you landed on and the website that referred you.
- How you use the page: pages viewed, clicks, scrolling, device and browser type, approximate location from your IP address, collected with cookies and similar technology. See Data and cookies.
- Public information about your business: your website, Google Business Profile and how search engines and AI tools describe you. This is what the audit is made of.
2. Why we use it
Based on your form submission (your request for an audit):
- To prepare and send your free audit, on WhatsApp and by email.
- To reply to you and follow up about your audit and our services, on WhatsApp, email or phone, until you tell us to stop.
- To book, remind you about and hold calls you ask for.
- To send a proposal and, if you become a client, to deliver the work, invoice you and keep the records the law requires (for example GST records).
- To send you a short series of follow-up emails about AI search and your results (about 5 emails over 3 weeks), and then the AI Search Briefing, our newsletter (about 2 emails a month). Every email has an unsubscribe link, and one click stops them all.
To run and improve our ads and pages (using the data in section 1 that describes how you found and used the page):
- To measure which ads, keywords and pages bring enquiries, and to tell Google Ads which clicks led to an enquiry, so we show our ads to similar businesses. For this, Google receives your email and phone number in a scrambled (hashed) form.
- To fix problems and make the page easier to use, including by viewing session recordings in which form fields are masked.
- To prevent spam and abuse of our forms.
We don't sell your personal data and we don't use it for anything not listed here. If we ever want to use it for a new purpose, we'll ask you first.
3. Who we share it with
We use these service providers ("data processors") to run the service. They process data on our instructions only:
| Provider | What for |
|---|---|
| Google (Ads, Analytics, Tag Manager, Workspace) | Ads measurement, page analytics, email |
| Microsoft (Clarity) | Page heatmaps and masked session recordings |
| Meta (WhatsApp) | Messaging you on WhatsApp |
| Brevo | Emails: your audit confirmation, follow-ups and the newsletter |
| n8n | Moving your enquiry between our tools |
| Slack | Notifying our team about new enquiries |
| Cal.id | Booking calls |
| OpenRouter and the AI model providers it connects to (such as Anthropic and OpenAI) | Drafting audit reports and replies, which our team reviews |
We may also share data if the law requires it, or with a buyer if our business is sold (under this same policy).
4. Where it's stored
Some of these providers store data outside India, for example in the United States or the European Union. We only use providers that protect data with industry-standard security, and we follow any restrictions the Government of India places on transfers to particular countries.
5. How long we keep it
- Enquiries that don't become clients: up to 24 months after our last contact, then deleted.
- Clients: for as long as you're a client, then up to 8 years for invoices and records the law requires us to keep.
- Analytics data: as set in each tool (Google Analytics is set to 14 months).
- If you ask us to delete your data, we delete it unless the law requires us to keep it.
6. Your rights
Under the DPDP Act you can:
- Get a summary of the personal data we hold about you and who we've shared it with.
- Correct, complete or update it.
- Ask us to erase it, when it's no longer needed for the purpose you gave it for.
- Withdraw consent anytime, as easily as you gave it: reply STOP on WhatsApp, click unsubscribe in any email, or email us. Withdrawing doesn't affect what we did before.
- Nominate someone to exercise your rights if you die or can't act yourself.
- Raise a grievance with us, and if you're not satisfied, complain to the Data Protection Board of India.
7. Grievances and contact
Email hello@mavixmarketing.com with the subject "Privacy request". We confirm we've received it within 3 working days and respond within 30 days (the DPDP Rules allow up to 90). We may ask you to confirm it's you, for example by replying from the email or WhatsApp number you used.
8. Children
Our services are for businesses. We don't knowingly collect data from anyone under 18. If you think a child has sent us their details, tell us and we'll delete them.
9. Security
We protect data with access controls, encrypted connections, and by limiting who on our team can see it. No system is perfectly secure; if a breach affects your data, we'll tell you and the Data Protection Board as the law requires.
10. Changes
We'll update this page if anything changes, with a new "last updated" date. If a change affects how we use data you've already given us, we'll tell you first.