Privacy & data at Maajii

The principles we hold

Four commitments shape how we handle founder data, each named for the right it protects.

Ownership. What you bring and what you build here is yours. Control. You decide who sees it, one person at a time, and you can withdraw that at any point. Access. You can download everything we hold about you, in one file, from your own workspace, and you can see who opened your material and when. Possession. You can keep evidence in your own storage and share only a view of it, so revoking it there ends access, and you can take a copy of everything at any time. Removing the copies we hold is still an email today, and a control in your own hands is being built.

OCAP® is a registered trademark of the First Nations Information Governance Centre (FNIGC). The FNIGC developed the First Nations principles of OCAP®, ownership, control, access and possession, which set out how First Nations' data should be collected, protected, used and shared. They are First Nations' framework for First Nations' data.

Our way of working with founder data is informed by those principles. We make no claim of compliance, certification or endorsement by the FNIGC or any First Nation. Where a founder is First Nations, or a venture's data is a community's data, that community's data governance decisions come first and we follow their direction.

How we weigh decisions

When growing Maajii and protecting you pull in different directions, protecting you wins. Three things are floors we do not trade for growth, speed or convenience: the security of your data, the law, and honesty about what the platform does. Everything we build sits above those floors.

The same rule governs this page. It describes what the product does today, and where something is still being built, it says so.

What we collect

Only what intake, human review, milestone tracking and matching need. What that is depends on why you are here.

Founders

• Your profile and venture: company, stage, sector, location, raise, traction, and the challenge you face right now.
• A growth ask you write for angels, kept separate from the challenge you describe to our reviewers.
• Milestones and the evidence behind them, as files you upload or as links to your own storage.
• Your valuation terms, only if you choose to share them.
• An optional intro video and a profile photo.

Angels

• Your investment thesis: sectors, stages, geography, cheque size, and how you like to be involved.
• The founders you save or pass on, and the introductions you request.

Everyone

• Your name, email address and role, the consents you give, your notification settings, and any feedback you send us.
• A record of access-sensitive actions, such as who opened a document and when.

Our public website runs no analytics, advertising or tracking cookies. Your browser keeps only your light or dark theme and, once you sign in, your session. Inside the signed-in dashboard, usage counts run only if you say yes (see Usage Counts).

Where your data lives

• Everything the platform holds is stored in Canada, in Amazon Web Services' Canada (Central) region: the database, uploaded files, sign-in, the email we send and, if you agree to it, the transcription of your video.
• We never store your password. Amazon Cognito, the sign-in service, holds it.
• These pages are served by our web host, which keeps ordinary server logs like any website. Anything you type into a form here goes directly to our systems in Canada.
• Evidence you link stays with your storage provider, and we never download it. Your own browser takes a fingerprint of the file so a reviewer can confirm it has not changed since you shared it, and revoking the link at your provider ends access at once.

We do not sell your data, share it with advertisers, or use it to train AI models. The assists our reviewers use are rules that run inside our own systems.

Who sees what

Each group sees a different view, and you decide how far each view opens.

You

Everything in your workspace, including your published readiness review: your tier, score and dimensions, and what to strengthen next.

Maajii reviewers

Your full profile and evidence, so a person can assess your readiness. Each time a reviewer opens one of your documents, we record who opened it and when.

Matched angels

A readiness view that opens in stages you control:

• Profile. Your company, sector, stage, growth ask, published tier and dimension bands, milestone and evidence counts, and your valuation terms if you shared them. Never your name or email.
• Mini data room. Opens once an introduction has been accepted.
• Diligence room. Opens only when you grant it to one named angel. You can withdraw a grant at any time, and it takes effect the next time they try to open anything. Every open is recorded.

Angels never see the challenge you describe to reviewers, reviewer notes, confidence ratings, or our internal valuation.

Founders viewing angels

Founders see an angel only after our team lists them, and never see an angel's email. What an angel saves or passes on stays private to that angel.

Introductions

Our team makes every introduction. Contact details are shared only once both sides have agreed.

The public

Nothing, unless you give separate consent to be featured on our home page. A feature shows your first name, company, sector, stage, growth ask, next milestone, photo, milestone count and published readiness review.

Consent, one decision at a time

Each consent is its own decision, recorded with its date, so we can show what you agreed to and when. You can withdraw any of them, and your latest choice is the one we follow.

• Collecting your intake information.
• For angels, being contacted about your access request, and having it shared inside Maajii to review it.
• A person reviewing your intro video.
• Machine transcription of that video, asked separately and never bundled with review. The transcript helps a reviewer read your video. It decides nothing.
• Sharing your valuation terms with matched angels.
• Each diligence-room grant, one angel at a time.
• Being featured on our public home page.
• Sharing your profile with a service provider or advisor, and crediting a partner who referred you.

Email and notifications

We email you when something needs you, and gather the rest into digests so nothing piles up. In your notification settings you can turn off any category: info requests and reviews, readiness Signal updates, introductions, new matches and watchlist, evidence and proofs, and weekly reminders. Account and security emails stay on, because they protect your account. Our email is sent from Canada.

Usage Counts

Inside the signed-in dashboard, we ask once whether we may count how you use it. Nothing is counted until you say yes. If your browser sends Do Not Track or Global Privacy Control, we take that as a no and don't ask.

With your yes, we record which pages you open, which buttons you press, how long a page stays open and how far you scroll. We never record what you type, your answers or your files. Your browser keeps a random id for the open tab, which ends when the tab closes. The records stay in Canada with the rest of your data. Detailed records are deleted after 90 days. After that we keep only daily totals, which name no one.

You can change your answer any time under the bell, in email preferences. Saying no stops new counts at once.

How readiness is decided

A person decides. Every readiness assessment is completed and published by a Maajii reviewer. Reviewers can use drafting assists, rules that suggest ratings from your evidence, but nothing reaches you or an angel until a reviewer has decided it and published it.

Matching is automatic and explainable. It compares an angel's thesis with a founder's profile on sector, stage, geography, cheque size and how each likes to work together, and every match shows the reasons it was made.

We never use automated deception, character or trustworthiness scoring, and we never make access, matching or introduction decisions from facial, tone or behavioural analysis.

Security

• Your data is stored in Canada and encrypted, both where it is stored and as it travels.
• Access is by role, each person gets only what their work needs, and access-sensitive actions are logged.
• Documents and videos open through a single gate that re-checks permission every time and issues a link that expires within ten minutes.
• We hold our security to SOC 2, an independent audit standard, as our target. We are not certified.
• If a breach affects your data, we will tell you, and the Privacy Commissioner of Canada, as Canadian law requires.

Keeping and deleting

We keep your data while your account is active. We have not yet set fixed deletion periods. We are setting them with legal counsel and will publish them on this page. Until then, email info@maajii.ca to have your data deleted at any time, and we will confirm when it is done. A deletion control in your own workspace is being built; what it will say about which records survive a deletion, and for how long, is the question we are putting to counsel, and we would rather build it late than describe it wrongly.

Taking a copy does not wait on any of that. Under Take a copy of your data in your workspace you can download everything we hold about you, either as a page you can read or as data you can process. It carries your profile and answers, your milestones and what is attached to each, every consent you gave or withdrew, who holds which room, your published Signal, and the record of who opened your material. Reviewer notes and our internal reference estimates are not in it, because those are our working record about your venture rather than your record about yourself, and the file names each omission rather than leaving a gap you have to guess at.

Not investment advice

Maajii Signal is a readiness assessment that helps founders and angels find a good fit. It is not investment advice, a recommendation to invest, or a promise of funding, introductions or success. We do not handle investment money, negotiate terms, or take a share of any raise.

Your rights and how to reach us

You can ask to see, correct or delete what we hold about you, and withdraw any consent, by emailing info@maajii.ca. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada. We date every change to this page at the top.