Privacy Policy

Last updated: 7 November 2026

Maa Commerce Hub (the Android app, the website at hub.maalabs.in and the Maa Commerce Connector WordPress plugin) is made by Maa Labs (“we”, “us”). This policy explains what we collect, why, and the choices you have. We do not sell data, we do not show ads, and we do not use third-party advertising or analytics trackers.

1. What we collect

• Your account: name, email address, an optional phone number, and your password, which we store only as a one-way hash (Argon2). We never see or store your password in readable form.
• Sign-in sessions: the type of device (Android app or web), its name, the time you last used it and a coarse location (city) derived from the IP address, so you can review and sign out devices from Security.
• Your connected websites: the site address, WordPress, WooCommerce and PHP versions, and an encrypted connection secret used to sign requests.
• Store and website data you choose to sync: orders, products, stock changes, customers, contact form enquiries, posts, pages, comments and media details from the websites you connect. You control what is synced in the connector’s settings.
• Support: messages you send us through support tickets or the contact form, and, only if you choose to attach them, redacted diagnostics (versions and error codes, never passwords).

2. Your customers’ data

When you connect a store, Maa Commerce Hub processes your customers’ order details (such as names, contact details and addresses) on your behalf so you can manage your business. You remain responsible for that data under the laws that apply to your store. We use it only to show it to you and the people you authorise, and to carry out the changes you make in the app.

3. How we use data

• To provide the service: show your store data, apply your changes to WordPress/WooCommerce and keep your devices in sync.
• To keep accounts secure: sign-in alerts, two-step verification and detecting misuse.
• To send service emails: verification codes, password resets, security alerts and replies to your tickets. We do not send marketing email without your consent.
• To fix problems and improve reliability, using error logs that do not include your passwords.

4. Where data is stored and how it is protected

Data is stored on servers hosted by Hostinger. Connections use HTTPS. Website connection secrets are encrypted with AES-256-GCM, every request between your website and our service is signed, and access to personal details by our staff requires a support ticket reference and is recorded in an audit log.

5. Sharing

We share data only with service providers we need to run the service: our hosting provider (Hostinger) and our email provider for service emails; and, when push notifications are enabled, Google Firebase Cloud Messaging to deliver notifications to your phone. We may disclose information if required by law. We never sell or rent data.

6. Retention and deletion

• When you disconnect a website, its synced data is deleted from our servers after 30 days.
• When you delete your account (Security → Delete account, in the app or dashboard), every website is disconnected immediately and your account and all synced data are erased after 30 days.
• You can export a copy of your account data at any time from Data & privacy.

7. Your rights

You can access, correct, export or delete your data, and withdraw consent, from the app or dashboard, or by sending a request through the contact form on hub.maalabs.in with the topic “Privacy request”. If you are in India, these rights include those under the Digital Personal Data Protection Act, 2023. We respond within 30 days.

8. Permissions on your phone

• Camera: to scan the pairing QR code and, if you choose, to take product photos.
• Photos: only the photos you pick to upload to your website.
• Biometrics: to unlock the app with your fingerprint or face. Biometric data never leaves your phone.
• Notifications: to alert you about new orders, enquiries and stock.

9. Children

Maa Commerce Hub is a business tool and is not intended for anyone under 18.

10. Changes

If we change this policy in a way that matters, we will tell you in the app and by email before the change takes effect.

11. Contact

Maa Labs · maalabs.in · Use the contact form at hub.maalabs.in (topic “Privacy request”).