Skip to content

Privacy Policy

Last updated: July 26, 2026

This Privacy Policy explains how Mazal ("we", "us", "our") collects, uses, shares, and protects your information when you use our website and services. By using the services, you agree to this Policy.

1. Data we collect

  • Account data: name, business name, email address, and password (stored hashed).
  • Billing data: subscription and payment details, processed by our payment provider; we do not store full card numbers.
  • Usage and device data: log information such as IP address, browser type, device information, pages viewed, and actions taken.
  • Content you provide: messages, support requests, uploaded files and media, business information, and other data you submit to use the services.
  • Communications data: where you use calling, messaging, or receptionist features, this can include phone numbers, call metadata, call recordings and transcripts, text messages, and chat conversations processed to provide those features.
  • Contact and lead data: information about the contacts, leads, callers, or website visitors you manage through the services, which you provide or which is captured on your behalf.
  • Connected-account data: when you connect a third-party account (for example, a social or advertising platform), the access tokens and account information needed to provide the integration.
  • Cookies and tracking data: see the Cookies section below, including advertising and analytics identifiers.

2. How we use it

  • To provide, maintain, secure, and improve the services;
  • To process payments and manage subscriptions;
  • To communicate with you about your account, support, and updates;
  • To detect, prevent, and investigate fraud, abuse, and security incidents, and to enforce usage limits;
  • To measure and improve our marketing and advertising; and
  • To comply with legal obligations.

We do not sell your personal information for money. Our use of advertising cookies and pixels may be considered "sharing" (or in some states, a "sale") of personal information for cross-context behavioral advertising under certain state privacy laws; you can opt out at any time via our Your Privacy Choices page or the Global Privacy Control browser signal. We use business-tier AI providers whose standard terms do not train their general-purpose models on data submitted through their APIs.

3. Cookies and tracking technologies

We use essential cookies to keep you logged in and maintain your session; these are required for the website to function. We also use analytics and advertising technologies, including the Meta (Facebook) Pixel and similar tools, to understand how our site is used and to measure and improve our advertising. These may set cookies or identifiers and share limited event data (such as page views or sign-ups) with advertising partners.

You can control cookies through your browser settings, and you can opt out of interest-based advertising through your device and ad-platform settings (for example, Meta's ad preferences). Where required by law, we will seek your consent before setting non-essential cookies.

Opting out of advertising cookies and pixels. Because our advertising tools share limited event data with advertising partners, that activity may be considered a "sale" or "sharing" of personal information under some state privacy laws. You can opt out at any time on our Your Privacy Choices page, no account required. We also treat the Global Privacy Control (GPC) browser signal as a valid opt-out: when your browser sends GPC, we automatically disable our advertising pixels for your visit.

4. Data we process on behalf of business customers

When you use features that handle information about your own callers, website visitors, leads, or contacts, we process that information as a service provider/processor on your behalf and under your instructions, to provide the services to you. As between you and us, you are responsible for having a lawful basis and any required notices and consents for that information (including for call recording and messaging). Those individuals should direct privacy requests to the business that collected their information.

5. Third-party processors

We rely on trusted third parties to operate the services. They handle data on our behalf under their own privacy and security commitments and, where applicable, data-processing agreements. These include providers for:

  • Payments and billing (Stripe);
  • Telephony and messaging (our calling/SMS provider), where you use those features;
  • AI model processing (our AI model provider(s)), to generate outputs from the content you submit;
  • Email delivery, for transactional and account-related emails;
  • Hosting and infrastructure; and
  • Advertising and analytics partners (such as Meta and Google), as described in the Cookies section.

A current list of our key subprocessors is available on request at hello@mazal.tech.

6. International data transfers

We and our processors may process and store data in the United States and other countries. Where data is transferred across borders, we rely on appropriate safeguards as required by applicable law.

7. Data security

We use reasonable technical and organizational measures to protect your data, including encryption in transit, hashed passwords, access controls, and account protections such as two-factor authentication. No method of transmission or storage is completely secure, but we work to safeguard your information.

8. Data retention

We retain personal data for as long as your account is active or as needed to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements. Communications data such as call recordings and transcripts is retained to provide the relevant feature; you can delete recordings and transcripts from your workspace at any time, or request deletion by contacting us, and we honor verified deletion requests as required by applicable law.

9. Your privacy rights (California and other U.S. states)

Depending on your location, you may have rights to access, correct, export, delete, or restrict the processing of your personal data, and to object to certain processing.

California (CCPA/CPRA). California residents have the right to know, delete, and correct personal information; the right to opt out of the "sale" or "sharing" of personal information; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising these rights. We do not sell personal information for money; our use of advertising pixels may constitute "sharing" for cross-context behavioral advertising, and you can opt out on our Your Privacy Choices page or via the Global Privacy Control signal, which we honor.

Other U.S. states. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights, including the right to opt out of targeted advertising, the sale of personal data, and certain profiling. You can exercise the targeted-advertising opt-out on our Your Privacy Choices page or via the Global Privacy Control signal.

How to exercise your rights. Contact us at hello@mazal.tech. We may need to verify your identity before acting on a request, and you may use an authorized agent where permitted by law. We will respond within the time required by applicable law. If we deny your request, you may appeal by replying to our decision with the word "Appeal"; if your appeal is denied, you may contact your state attorney general.

10. Children's privacy

The services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact

For any privacy questions or requests, reach us at hello@mazal.tech.