Privacy requests and data handling

Use the privacy process for rights, consent and reviewed personal-data requests.

Contact and scope

Contact the relevant business privacy contact or hi@thisismay.ai. Identify the relationship and the information concerned without sending unnecessary identity documents. MAY verifies requests proportionately and follows the applicable law and contractual instructions.

Use the Privacy centre

Authorised business reviewers can track request verification, correction, withdrawal, grievances, holds, recoverable deletion and reviewed erasure. A customer-specific export must not include another customer’s information or business secrets.

Understand deletion

Ordinary deletion hides records from normal operations and keeps recoverable history. Reviewed personal-data erasure considers identity, required retention and holds, then tracks operational records and other copies such as processors, object/vector storage and backups. A restricted record remains personal data while identifiable.

Separate training permission

Service delivery and optional model-training preparation are separate purposes. The existing optional preparation process uses reviewed generic templates rather than exporting raw customer conversations. It requires the applicable authority and current explicit training permission; approving examples does not itself start a training job.

Further information

Read the Privacy Policy for data categories, purposes and rights, and the Data Protection Policy for the handling framework. Specific deployment/provider commitments belong in the applicable agreement and current provider information.