Privacy notice
Last updated 20 October 2026
MAWU is operated by Abraxas Group Limited. This notice explains what we collect when you use MAWU, why, who sees it, how long we keep it and what you can ask of us.
1. Who we are
The controller of your personal information is Abraxas Group Limited, 21st Floor, CMA Building, 64 Connaught Road Central, Central, Hong Kong Island, Hong Kong. For anything in this notice, write to privacy@mawudoesit.com.
2. What we collect
Account details: your name, email address, company and sign-in information. Your password is stored only in a one-way scrambled form we cannot read back.
Workspace content: the brands, goals, audiences, briefs, campaign content and generated assets you create or upload.
Connected channels: when you connect a social, ad or email account, the access it grants us, so MAWU can act on it as you instruct.
Usage and billing: the work performed for you, credits used, plan and invoices, and basic technical logs needed to run and secure the service.
3. Why we use it
To provide MAWU and do the work you ask for (to perform our agreement with you).
To bill you, keep accounts secure, prevent misuse and fix problems (our legitimate interests).
To meet legal obligations and answer requests about your rights (legal obligation).
We do not sell personal information and we do not use your workspace content to advertise to others.
4. AI and approvals
MAWU uses AI services to plan and draft marketing work. Those providers act on our instructions and may not use your information for their own purposes. Anything consequential, such as publishing or paid spend, waits for your approval.
5. Who we share it with
Providers who host and run MAWU, the AI services above and our payment provider, acting on our instructions.
The channels you connect, only for the actions you approve.
Authorities or others where the law requires it, or to protect someone's rights or safety.
6. International transfers
Your information may be processed outside your country, including in Hong Kong, the European Union and the United States. Where the law requires safeguards for a transfer, such as standard contractual clauses, we use them.
7. How long we keep it
Account and workspace data: for the life of your account, plus 30 days. Billing records: as long as tax and accounting law requires. Security logs: up to one year. When you ask us to delete something we do, unless the law or an open dispute requires us to keep it.
8. Your rights
Depending on where you live, you can ask to access, correct, export or delete your information, object to or restrict some uses, and withdraw consent. Email privacy@mawudoesit.com; we answer within 30 days. You can also complain to your local data-protection authority.
9. Changes and contact
We will post changes here and tell account holders about material changes by email. Questions: privacy@mawudoesit.com.