Maya by Janet Xiu Shi: privacy, transparency, and rules for her AI digital twin
Last updated: 14 August 2026 | Effective: 28 July 2026 (Privacy), 23 July 2026 (Terms), Maya V2.0
A short public summary of Maya's privacy and transparency controls. Full detail follows in the Privacy Notice below.
Full detail on data processing, consent, retention, and your rights.
The short version: This notice documents how Maya, Janet Xiu Shi's AI digital twin, is built with transparency-by-design as part of Janet's digital solutions practice. No account is needed, nothing is ever sold to anyone, and website analytics only runs if you say yes to it (advertising features are a separate choice, off unless you turn them on). When you chat, your message is processed within AWS's EU infrastructure to generate a reply. Maya does not save that conversation content unless you Opt-in; there is no user account. Saving chats is optional and off by default. Each chat has its own saving choice. If you Opt-in, you can support quality improvement of Janet's digital solutions; that choice applies to that chat only and cannot be changed in the same conversation. Saved chats are held for 90 days only, then deleted automatically, and stored in the EEA. To chat without saving after opting in, start a new chat (+ New Chat) and leave the save box unticked.
Maya is Janet Xiu Shi's AI digital twin and a working example of her advisory practice in responsible AI and digital solutions. The controls on this page are not a bolt-on disclaimer; they are how the product is designed.
These implemented controls are the transparency and audit-readiness posture Janet advises organisations to aim for in their own AI systems. This notice describes design and practice; it does not claim a third-party certification or formal audit attestation.
If your organisation wants the same transparency-by-design approach in its own AI digital solutions, contact Janet at info@janetxiushi.me.
Data Controller (the person responsible for your data): Janet Xiu Shi
Contact: info@janetxiushi.me
If you have any questions about how your data is used, or wish to exercise your rights, please contact Janet directly at the email above.
If you use the chat, the following may be recorded for each conversation turn when saving is enabled:
A minimal consent record (your saving choice, timestamp, and a pseudonymised IP) is kept on our side so consent can be demonstrated. Your saving choice for each chat is stored with that chat session in your browser. A new chat always starts with a fresh consent step.
No account, name, or email address is collected through the chat. No payment data is processed.
Session continuity, regardless of saving: a short-lived record of the current conversation (message history, session identifier) lets Maya follow a multi-turn chat, and expires 24 hours after your last message. This is not linked to your IP address and is separate from the 90-day conversation logs described above, which only exist if you Opt-in.
Website analytics (your choice, separate from chat). This part is only about tracking the page, not about Maya or your conversation. This page uses Google Analytics 4, and only if you say yes. Until you choose, no analytics script loads, no analytics cookies are set, and nothing goes to Google. Saying no is 1 click, in the same place and at the same size as saying yes, and it costs you nothing: every part of Maya works exactly the same either way.
There are 2 separate choices, and saying yes to one does not say yes to the other:
_ga and _ga_<property>, so it can tell a returning browser
from a new one. Legal basis: your consent (GDPR Article 6(1)(a), and Regulation 5
of S.I. 336/2011).
If you say yes to analytics, this is set to collect the more detailed location and device information. In full, that is:
Country and region get collected either way; the list above is the extra detail this setting adds. Google uses your IP address to work out the location, and Google Analytics does not keep that IP address anywhere Janet can see it.
Analytics never receives your chat messages or Maya's replies. It is a site-wide choice, not a per-chat one, and it is entirely separate from the saving choice you make when you start a chat. How long analytics data is kept is in section 5, who Google is in all this is in section 7, and where the data goes is in section 9.
Your analytics answer is stored in your browser (localStorage key "jxsConsentV2") so you are not asked on every visit, and you will be asked again after 6 months. Janet's other sites ask separately, because carrying your answer between them would mean tracking you from site to site, which is the thing this rebuild took out.
In plain terms: processing your message is what makes Maya work at all, while saving chats is entirely your choice. Opt-in saving has two outcomes: it helps Janet improve Maya and her digital solutions quality, and it keeps logging optional, consent-based, and time-bounded at 90 days. We rely on two legal bases, depending on the processing:
Janet and Maya do not sell your data for advertising, and never share it beyond the processors listed in section 7.
Saved conversation logs and consent records are automatically deleted after 90 days. Short-lived server diagnostic logs (see section 4) are deleted after 30 days. The session record that keeps a chat coherent while you're using it (see section 3) expires 24 hours after your last message, regardless of your saving choice. You can also request earlier deletion of saved conversation logs at any time (see section 8).
Website analytics is separate from all of the above. If you say yes to analytics, data tied to a device or an identifier is kept for up to 14 months, and the clock restarts when you come back. So it is 14 months from your last visit, not your first: come back inside that window and it starts again; never come back, and it is deleted 14 months after your last visit. That is spelled out rather than written as a flat "14 months", because for a returning reader those are 2 different things.
2 exceptions Google applies whatever Janet sets: age, gender and interest data always expires after 2 months, and grouped reports, which hold nothing that identifies anyone, are not covered by the retention setting at all.
Opt-in is how users who wish to can support quality improvement of Janet's digital solutions while remaining protected by EU-only storage and the 90-day retention limit. It is never required to use the chat.
When you use the chat, your data may pass through these parties:
Like most websites, this page's own static content (the layout, images, and code that make up the page you're reading) is delivered through a content delivery network so it loads quickly wherever you are, and loads fonts and code libraries from third-party providers (Google Fonts and jsDelivr). These delivery mechanisms only ever handle the public page itself, never your chat messages, and receive standard technical data such as IP address and browser type when the page loads.
Google Analytics - loaded only if you say yes to analytics (see section 3), and never given your chat content. Google plays more than 1 part here, and it is worth being clear which is which.
For the analytics itself, meaning the pages and events and the location and device detail above turned into reports, Google is working for Janet. It handles that data on her instructions under Google's Ads Data Processing Terms, and Google Analytics sits on Google's own list of processor services. She stays responsible for it.
For Google Signals and advertising features, Google is not working for Janet. It is using information from your own Google account, which it holds for its own reasons under its own privacy policy, and she has no say in that. Google calls this a controller to controller arrangement, and that is the honest description of it.
There is a third part, and it is separate from both of those. Janet's Google Analytics account has a setting switched on that shares some of the analytics data with Google, so Google can improve its own products and services. For that sharing, Google is again acting for itself rather than for her. It is not the same thing as Google Signals above, and Google is explicit that this data is not used for ad personalisation or ad targeting; it is Google learning from how sites like this one get used. This was accepted on the account in March 2019, years before this rebuild, and the property behind this page inherited it. Janet has looked at it and decided to leave it on. Google does not describe this data as anonymised, so this notice does not describe it that way either.
There is also the moment your browser sends anything to Google at all, which happens because Janet put Google's tag on this page. For that moment, Google and Janet are jointly responsible. That covers the sending, not what Google does with it afterwards. The Court of Justice set that out in Fashion ID (Case C-40/17).
None of this touches your chat. Chat content stays on the EU-only infrastructure described above, and no part of Google Analytics ever receives your messages or Maya's replies.
For more detail on how any of these parties handle your data, contact info@janetxiushi.me and Janet will respond directly.
Under GDPR, you have the following rights:
To exercise your rights, email info@janetxiushi.me. For an erasure request, include the IP address you used when chatting, if you know it - this is what allows us to locate your records; approximate date and time alone cannot. Because no account is required, it may not always be possible to link you to specific records (GDPR Article 11). If identification is not possible, Janet will tell you.
Requests are fulfilled within one month.
Your message content is processed within EU regions, and conversation logs and consent records are stored only in the EEA when you Opt-in to save. Chat content is not transferred outside the EEA for processing or storage.
This notice describes the technical routing Janet has configured (EU-region processing and storage); it does not itself claim an independently verified transfer-framework certification (such as a specific Data Privacy Framework certification or a full Standard Contractual Clauses review) covering every underlying AWS sub-processor. For questions about the underlying provider arrangements, contact info@janetxiushi.me.
The public page you are reading (its layout, images, and code, never your chat messages) may be delivered through a content delivery network with locations outside the EEA, purely for page loading speed. This is standard web-hosting practice and does not involve your chat content.
Website analytics is the exception to everything above. If you say yes to analytics, that data is not EEA-only the way your chat is. Google is a US company. Google Analytics is sold to Janet by Google Ireland Limited, but the data can be sent to and processed by Google LLC in the United States, and most likely will be. That is worth saying plainly rather than leaving you to work it out.
What covers that transfer is the EU-U.S. Data Privacy Framework. Google is self-certified under it, and the European Commission decided in 2023 that the framework gives your data adequate protection when it travels to the US. That decision is in force today. It has been challenged in court. The General Court upheld it on 3 September 2025 (Case T-553/23, Latombe v Commission), and an appeal is now with the Court of Justice (Case C-703/25 P), still undecided. If it were ever overturned, Janet would have to change how this works or stop using Google Analytics, and this page would be updated.
You can check Google's certification at dataprivacyframework.gov and read Google's privacy policy at policies.google.com/privacy. This applies to all analytics data, not only to advertising features: it would still be true with advertising features switched off.
Your chat is a different thing and is not affected by any of this. Chat content stays in the EU for processing and in the EEA for storage, whatever you choose about analytics.
This service is not intended for anyone under 16, and is not designed to process special categories of data (such as health or political opinions). Please do not include sensitive personal information in your messages.
No automated decisions with legal or similarly significant effects are made. Data is encrypted in transit and at rest, with access restricted to the data controller.
If this notice changes materially (new data collected, new processor, changed retention period), the consent prompt will reappear and you must review it and make your choice again before chatting. The "Last updated" and "Effective" dates at the top of this page reflect when this notice was last published and when the Privacy Notice first applied.
Rules for using Maya. Effective 23 July 2026.
The short version: Maya is an AI system, not Janet in person. Replies can be wrong. Do not treat chat as legal, medical, financial, or contractual advice. Do not share sensitive personal data. Use the service respectfully. How your data is handled is explained in the Privacy Notice above.
Maya is the AI-powered digital twin of Janet Xiu Shi, an Ireland-based AI Quality Evaluation Advisor and AI Educator. Maya answers questions and shares Janet's thinking. Janet does the advisory work. Replies are AI-generated and may be inaccurate or incomplete.
Nothing Maya says is legal, medical, financial, tax, or contractual advice, and nothing here creates a client relationship. For personal, confidential, or contractual matters, contact Janet directly at info@janetxiushi.me or via janetxiushi.me.
You agree not to:
Message processing, optional conversation saving, retention, and your rights are described in the Privacy Notice on this page.
Maya is provided as-is for information and demonstration. The service may change, pause, or become unavailable without notice. No uptime or outcome is guaranteed.
Questions about these terms: info@janetxiushi.me. The service is operated from Ireland by Janet Xiu Shi.