← Back to Maya

Privacy Notice and Terms of Use

Maya by Janet Xiu Shi: privacy, transparency, and rules for her AI digital twin

Last updated: 24 July 2026  |  Effective: 24 July 2026 (Privacy and Terms), Maya V2.0

How Maya handles your data

A short public summary of Maya's privacy and transparency controls. Full detail follows in the Privacy Notice below.

Privacy Notice

Full detail on data processing, consent, retention, and your rights.

The short version: This notice documents how Maya, Janet Xiu Shi's AI digital twin, is built with transparency-by-design as part of Janet's digital solutions practice. No account is needed, there are no advertising trackers, and nothing is ever sold to anyone. When you chat, your message is processed within AWS's EU infrastructure (Ireland) to generate a reply. Maya does not save that conversation content unless you Opt-in; there is no user account. Saving chats is optional and off by default. Each chat has its own saving choice. If you Opt-in, you can support quality improvement of Janet's digital solutions; that choice applies to that chat only and cannot be changed in the same conversation. Saved chats are held for 90 days only, then deleted automatically, and stored in the EU (Ireland). To chat without saving after opting in, start a new chat (+ New Chat) and leave the save box unticked.

1. Built as Janet advises clients to build AI

Maya is Janet Xiu Shi's AI digital twin and a working example of her advisory practice in responsible AI and digital solutions. The controls on this page are not a bolt-on disclaimer; they are how the product is designed.

These implemented controls are the transparency and audit-readiness posture Janet advises organisations to aim for in their own AI systems. This notice describes design and practice; it does not claim a third-party certification or formal audit attestation.

If your organisation wants the same transparency-by-design approach in its own AI digital solutions, contact Janet at info@janetxiushi.me.

2. Who is responsible for your data?

Data Controller (the person responsible for your data): Janet Xiu Shi
Contact: info@janetxiushi.me

If you have any questions about how your data is used, or wish to exercise your rights, please contact Janet directly at the email above.

3. What data is collected?

If you use the chat, the following may be recorded for each conversation turn when saving is enabled:

A minimal consent record (your saving choice, timestamp, and a pseudonymised IP) is kept on our side so consent can be demonstrated. Your saving choice for each chat is stored with that chat session in your browser. A new chat always starts with a fresh consent step.

No account, name, or email address is collected through the chat. No payment data is processed.

Session continuity, regardless of saving: a short-lived record of the current conversation (message history, session identifier) is kept for up to 24 hours so Maya can follow a multi-turn chat, then it expires automatically. This is not linked to your IP address and is separate from the 90-day conversation logs described above, which only exist if you Opt-in.

Analytics (Opt-in, separate from chat saving): if you tick the analytics box, Google Analytics records anonymous, aggregated usage of the page (pages viewed, general browser and device information) so Janet can see how Maya is used. This choice applies site-wide across all your chats, not per chat, and is never on by default. It never receives your chat messages or Maya's replies. This chat page uses no advertising trackers.

4. Why is this data collected?

In plain terms: processing your message is what makes Maya work at all, while saving chats is entirely your choice. Opt-in saving has two outcomes: it helps Janet improve Maya and her digital solutions quality, and it keeps logging optional, consent-based, and time-bounded at 90 days. We rely on two legal bases, depending on the processing:

Legitimate interests (GDPR Article 6(1)(f))

Consent (GDPR Article 6(1)(a))

No data is used for advertising, sold to third parties, or shared beyond the processors listed in section 7.

5. How long is data kept?

Conversation logs and consent records are automatically deleted after 90 days from all storage locations. Short-lived security logs used for abuse prevention are deleted within 30 days. The session record that keeps a chat coherent while you're using it (see section 3) expires automatically after 24 hours, regardless of your saving choice. You can also request earlier deletion of saved conversation logs at any time (see section 8).

6. Opt-in, opt-out, and how saving works

Opt-in is how users who wish to can support quality improvement of Janet's digital solutions while remaining protected by EU-only storage and the 90-day retention limit. It is never required to use the chat.

7. Who processes your data?

When you use the chat, your data may pass through these parties:

Like most websites, this page's own static content (the layout, images, and code that make up the page you're reading) is delivered through a content delivery network so it loads quickly wherever you are, and loads fonts and code libraries from third-party providers (Google Fonts and jsDelivr). These delivery mechanisms only ever handle the public page itself, never your chat messages, and receive standard technical data such as IP address and browser type when the page loads.

Google Analytics - only loaded if you tick the separate analytics box, and processed by Google under Google's own data processing terms. Unlike the EU-only chat infrastructure above, Google Analytics is not restricted to EU-only processing; Google is self-certified under the EU-U.S. Data Privacy Framework for this kind of data. It never receives chat messages or replies, only anonymous, aggregated page-usage data.

For more detail on how any of these parties handle your data, contact info@janetxiushi.me and Janet will respond directly.

8. Your rights

Under GDPR, you have the following rights:

To exercise your rights, email info@janetxiushi.me. For an erasure request, include the approximate date and time of your conversation. Because no account is required, it may not always be possible to link you to specific records (GDPR Article 11). If identification is not possible, Janet will tell you.

Requests are fulfilled within one month.

9. Data transfers outside the EEA

Your message content is processed within AWS's EU infrastructure (Ireland, eu-west-1), including the Bedrock EU inference routing used to generate replies, and conversation logs and consent records are stored only in the EEA (AWS eu-west-1, Ireland) when you Opt-in to save. Chat content is not transferred outside the EEA for processing or storage.

This notice describes the technical routing Janet has configured (EU-region processing and storage); it does not itself claim an independently verified transfer-framework certification (such as a specific Data Privacy Framework certification or a full Standard Contractual Clauses review) covering every underlying AWS sub-processor. For questions about the underlying provider arrangements, contact info@janetxiushi.me.

The public page you are reading (its layout, images, and code, never your chat messages) may be delivered through a content delivery network with locations outside the EEA, purely for page loading speed. This is standard web-hosting practice and does not involve your chat content.

If you opt in to analytics (see section 7), Google Analytics processing is not restricted to the EEA the way chat content is; it relies on Google's EU-U.S. Data Privacy Framework self-certification instead. It never receives chat messages or replies.

10. A few sensible limits

This service is not intended for anyone under 16, and is not designed to process special categories of data (such as health or political opinions). Please do not include sensitive personal information in your messages.

No automated decisions with legal or similarly significant effects are made. Data is encrypted in transit and at rest, with access restricted to the data controller.

11. Changes to this notice

If this notice changes materially (new data collected, new processor, changed retention period), the consent prompt will reappear and you must review it and make your choice again before chatting. The "Last updated" and "Effective" dates at the top of this page reflect when this notice was last published and when the Privacy Notice first applied.

Terms of Use

Rules for using Maya. Effective 23 July 2026.

The short version: Maya is an AI system, not Janet in person. Replies can be wrong. Do not treat chat as legal, medical, financial, or contractual advice. Do not share sensitive personal data. Use the service respectfully. How your data is handled is explained in the Privacy Notice above.

T1. What Maya is

Maya is the AI-powered digital twin of Janet Xiu Shi, an Ireland-based AI Evals and Quality Advisor working across strategic AI and cloud, and AI Educator. Maya answers questions and shares Janet's thinking. Janet does the advisory work. Replies are AI-generated and may be inaccurate or incomplete.

T2. Not professional advice

Nothing Maya says is legal, medical, financial, tax, or contractual advice, and nothing here creates a client relationship. For personal, confidential, or contractual matters, contact Janet directly at info@janetxiushi.me or via janetxiushi.me.

T3. Your responsibility

T4. Acceptable use

You agree not to:

T5. Data and privacy

Message processing, optional conversation saving, retention, and your rights are described in the Privacy Notice on this page.

T6. Availability

Maya is provided as-is for information and demonstration. The service may change, pause, or become unavailable without notice. No uptime or outcome is guaranteed.

T7. Contact

Questions about these terms: info@janetxiushi.me. The service is operated from Ireland by Janet Xiu Shi.