Privacy Policy
Last updated: 09.06.2025
Introduction
Moonstone Digital Limited (“Controller,” “we,” “us,” or “our”), a company registered under VAT number MT27166018, with its registered office at Centris Business Gateway, Level 2M, Triq Is-Salib Tal-Imriehel, Zone 3, Central, Business District, CBD3020, Birkirkara, Malta, is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) when you interact with the Maxfusion.ai platform (the “Platform”).
2. Data Controller
The data controller responsible for the processing of your personal data is:
Moonstone Digital Limited
Centris Business Gateway, Level 2M, Triq Is-Salib Tal-Imriehel, Zone 3, Central, Business District, CBD3020, Birkirkara, Malta
3. Data Collection
We may collect personal data that directly or indirectly identifies you, including:
Identification Data: Full name, email address.
Professional Data: Company name, position/function, company size, company website, logo.
Login Data: Logs, IP address.
Third-Party Authentication Data: Name and email collected from third-party authentication services (e.g., Google, Microsoft).
Browsing Data: IP address, pages viewed, date and time of connection, browser used, operating system, user ID, location data.
Communication Data: Recordings and content of telephone calls with customer care.
Financial Data: Bank details, credit card information (CVV2 not stored).
Contact Data: Information provided in contact requests.
We shall specify whether providing certain data is mandatory or optional at the time of collection.
4. Legal Basis and Purposes of Processing
We process personal data for the following purposes, based on the specified legal grounds and retention periods:
Processing Purpose | Legal Basis | Data Retention Period |
Provision of services through the Platform. | Performance of a contract, or pre-contractual steps at your request. | Account duration; Connection logs: 10 weeks; Inactive accounts deleted after 2 years; Archived for 5 years for evidentiary purposes. |
Contract management, order processing, invoicing, and customer relationship management. | Performance of a contract. | Duration of business relationship; Transaction data (excluding banking data): 5 years for evidentiary purposes; Contract and signature data: 10 years; Credit card data retained by payment service provider. |
Improvement of services. | Legitimate interest. | Telephone call recordings: 6 months; Call content analysis documents: 1 year; Personal data: 6 months. |
Management of user opinions on products, services, or content. | Legitimate interest. | 2 years from publication of opinion. |
Creation of customer and prospect database. | Legitimate interest. | Customers: Duration of business relationship; Prospects: 3 years from last contact. |
Sending newsletters, requests, and direct marketing mailings. | Legitimate interest. | 3 years from last contact. |
Responding to information requests and inquiries. | Legitimate interest. | 3 years from last contact. |
Compliance with legal and regulatory obligations. | Legal obligations. | Invoices: 10 years; Transaction data (excluding banking data): 5 years for evidentiary purposes; Contract and signature data: 10 years. |
Analytics and improvement of Platform functionality (audience measurement cookies). | Consent. | 25 months. |
Processing data subject requests to exercise their rights. | Legitimate interest. | Proof of identity retained only for verification purposes and then deleted. |
5. Data Recipients
Your personal data may be disclosed to:
Our employees.
Our data processors, including AI service providers, lipsync providers, generative voice AI providers, hosting service providers, newsletter sending service providers, audience measurement and analysis service providers, electronic messaging service providers, secure payment service providers, invoicing tools, cookie management tools.
Public and private organizations, when required by law.
6. International Data Transfers
Your personal data is hosted on servers located within the European Union. However, in the context of our processing activities, data may be transferred outside the European Union. Such transfers are safeguarded as follows:
Transfers to countries with an adequacy decision by the European Commission.
Transfers to countries without an adequacy decision, based on appropriate safeguards such as Standard Contractual Clauses, Binding Corporate Rules, or approved certification mechanisms.
Other transfers under appropriate safeguards as per Chapter V of the GDPR.
7. Data Subject Rights
You have the following rights:
Right to be informed: About the collection and use of your personal data.
Right of access: To obtain confirmation that your data is being processed and to access it.
Right to rectification: To correct inaccurate or incomplete data.
Right to restriction of processing: To limit the processing of your data under certain circumstances.
Right to erasure (“right to be forgotten”): To request the deletion of your data.
Right to lodge a complaint: With a supervisory authority.
Right to define instructions: Regarding the retention, deletion, and communication of your data after your death.
Right to withdraw consent: At any time, where processing is based on consent.
Right to data portability: To receive your data in a machine-readable format and to have it transferred to another controller.
Right to object: To processing of your data under certain circumstances.
To exercise these rights, contact us at info@maxfusion.ai or Moonstone Digital Ltd, Centris Business Gateway, Level 2M, Triq Is-Salib Tal-Imriehel, Zone 3, Central, Business District, CBD3020, Birkirkara, Malta. We may require identity verification.
7. Children's Privacy
Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
8. Cookies
For information on cookie management, refer to our Cookies Policy.
9. Contact Information
For data privacy matters, contact:
Email: info@maxfusion.ai
Address: Moonstone Digital Ltd, Centris Business Gateway, Level 2M, Triq Is-Salib Tal-Imriehel, Zone 3, Central, Business District, CBD3020, Birkirkara, Malta
10. Modifications
We may update this Privacy Policy to reflect changes in our practices or legal obligations. The updated version will be effective upon posting. We will notify you of significant changes.
This revised policy offers a more comprehensive, structured, and legally sound approach to presenting the privacy practices.