Effective 27 August 2026 · iHayz is a brand of Media Experts LLC (USA) and Media Experts (India).
The short version
- We collect what the work needs and little else. No advertising trackers on this site.
- Payments happen on our payment providers’ own secure pages — card numbers never reach us.
- Nothing you give us is sold, and nothing is used to train anything.
- The site assistant remembers you only against a random id, and forget me deletes it immediately.
What this site collects
- Contact form and requests: your name, email and what you write, kept as business records with their reference number so we can reply.
- The site assistant: while you chat it keeps the conversation and a short working note — what your business does, what you asked, what it recommended — on our server, tied to a random id in your browser, not your identity. Type forget me (or use the link under the message box) and the note and id are deleted at once; notes clear automatically after 90 days without a visit.
- Server and security logs: IP address, browser type and requested pages, kept briefly to run and protect the site. The site is served through a content-delivery network, which processes the same data to do its job.
- Payments: our payment providers collect your card details on their own secure payment pages. We receive confirmation of the payment — never your card number.
What our systems process for clients
When we operate a system for a client — an inbox agent, an assistant, an automation — we act on that client’s instructions. The system processes the client’s content and, where the service involves customer conversations, the messages their customers send. That data is used to deliver the service: to answer, to escalate to a person, and to report to the client. It is not used for anything else.
- Connections to platforms run through official APIs, on accounts the client owns and can revoke at any time.
- Automated replies are disclosed as such, and sensitive matters are handed to a person.
- Demo connections are read-only, expire within about an hour, and their data is deleted when they end.
- If you are a customer of one of our clients and want your data handled or removed, the client decides — contact them, or write to us and we will pass it on and assist.
Who we share with
Only the processors needed to run the service: hosting and content delivery, the payment providers, transactional email, and the AI infrastructure that generates responses. Each receives only what its function requires. We do not sell personal data, we do not run third-party advertising trackers on this site, and we do not use your content to train models.
Retention and security
Working notes from the site assistant clear after 90 days of inactivity. Business records — requests, invoices, correspondence — are kept as long as running the business and the law require. Client-work data follows the client’s engagement and is handed over or deleted when it ends. Access to systems is limited to what each part needs, credentials are stored outside the web root, and connections are revocable by their owners.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted — by email to [email protected]. We answer in writing. Where law such as the GDPR applies, you also have the rights it grants, including complaint to a supervisory authority. Our servers are in the United States; by using the site you understand data is processed there.
Children and changes
The site and services are for businesses and are not directed at children under 16; we do not knowingly collect their data. When this policy changes, the date above changes with it, and material changes affecting an ongoing engagement are told to clients directly.