Privacy Policy
This policy covers the MaYa connector served at https://catalog-mcp.my-shop.co.il/mcp, and the MaYa Account sign-in and the
restaurant order pages it links to. MaYa is operated by My Shop Technologies Ltd., My Shop USA Inc. (1590 NE 162nd St, Suite 500, North Miami Beach, FL 33162, USA) and My Shop Holdings Inc. ("MyShop", "we"). It explains what MaYa receives
when an AI assistant calls its tools and when you finish an order, why, who receives it, how long it is kept and
what you can do about it. Our general policy is at
https://myshoptechnologies.com/privacy-policy-app/ (Israel:
https://my-shop.co.il/privacy-policy-app/); where the two differ for MaYa, this page applies.
1. Data we collect
| Source | What we receive |
|---|---|
Browsing tools (list_categories, find_businesses, get_business,
get_menu, get_menu_items, get_item, and the card's
get_item_config) |
The arguments the assistant sends: the place or address to search near, a category or dish name, a restaurant or dish identifier, and a language code. When your assistant shares an approximate location (such as your city and country), it is used to find restaurants near you. These tools never ask for your name or phone number; a place you search near may be your own address. |
Basket tools (price_cart, build_order, get_cart) |
The dishes you choose, their options and quantities, any kitchen note on a dish, and whether you want delivery or pickup. ChatGPT sends an identifier of the conversation with each call; we keep only a one-way hash of it, to keep one basket per conversation. |
| MaYa Account (id.myshoptechnologies.com), only when you choose to order | Your mobile phone number, the one-time code we send to it by SMS, and your name. |
| The restaurant's order page, only when you choose to order | For delivery, your address and the pin you confirm on the map; a note to the restaurant, a tip, your pickup arrival time, and your confirmation of legal age when an item requires it. |
| Technical data | The time of each request, the tool or page called, and how long it took. The tools are called by your AI assistant's servers, not by your device. When you use the MaYa Account or the order page, your browser's IP address is used to limit abuse (rate limiting) and appears in our request and security logs, as on most websites. |
We do not receive your chat history, your assistant account details, or any payment card data: you pay the restaurant on its own payment page.
2. Why we use it
- To show you restaurants, menus and prices, and to keep your basket while you build it.
- To price your order at the restaurant, send it to the restaurant when you place it, and let the restaurant contact you about it.
- To confirm your phone number when you sign in.
- To operate, secure and debug the service (preventing abuse, investigating errors).
We do not sell your data, do not use it for third-party advertising, and do not use it to train AI models.
3. Who receives it
- The restaurant you order from receives your order, name, phone number, and for delivery your address and note, to prepare and deliver it. It handles your order under its own policies.
- Service providers that process data on our behalf: our cloud hosting provider (Amazon Web Services); the SMS providers that deliver the sign-in code (Amazon SNS in the United States, InforU in Israel); and Google Maps, which our catalog uses to find the position of a place you search near, and which the order page uses in your browser to show the map and find your address.
- The restaurant's payment provider, on its own payment page, when you pay.
- Authorities, when required by law.
- The AI assistant you use (for example OpenAI's ChatGPT or Anthropic's Claude) sees what you type and what MaYa returns, under its own privacy policy.
4. How long we keep it
- Logs of the connector, the MaYa Account and our web servers (the time, the tool or page, the browsing arguments above, each priced basket's dishes, options and kitchen notes, and the IP address that made each request): deleted automatically after about 31 days. Your name, delivery address and note to the restaurant never appear in them, and a phone number appears only masked (such as +1 30***77).
- Logs of our catalog server, which passes your order to the restaurant (the order details it receives, including your name, phone number and delivery address): deleted automatically within about 37 days.
- Your basket: linked to your conversation for 20 minutes. The card also keeps it in your browser until the end of the restaurant's day.
- Order drafts: every basket that is priced, and every quote on the order page with the delivery address entered there, is kept as an order draft even if you never order, so that a price you were shown can be checked later. Drafts are kept with our order records; you can ask us to delete yours (section 5).
- Orders, and the priced basket behind them: kept as order records, as for any order on the restaurant's own website, for as long as the restaurant's accounting and tax records require.
- Places searched for: the place and its position on the map are kept, linked to no person or conversation, so that the same search is answered faster.
- MaYa Account: your phone number and name are kept while your account exists. The sign-in code is stored only as a keyed hash and expires after 5 minutes.
5. Your choices and controls
- Browsing needs no sign-in, name or phone number. You sign in only when you choose to finish an order, on our own page, never in the chat.
- Nothing is ordered until you press Place Order on the restaurant's page.
- You can ask us to access, correct or delete your data by emailing privacy@myshoptechnologies.com or through https://myshoptechnologies.com/data-deletion/. We answer within 30 days.
- You can disconnect MaYa from your AI assistant at any time in that assistant's settings.
6. Security
All traffic uses HTTPS. The pass that opens the restaurant's order page lasts 30 minutes, stays in your browser and is never written to our logs. Section 4 lists what our logs contain and how long they are kept.
7. Children
MaYa is not directed to children under 13. Items restricted by age, such as alcohol, require you to confirm that you are of legal age (21 in the United States, 18 in Israel).
8. Contact
privacy@myshoptechnologies.com. We update the date above when this policy changes.