Privacy, terms and security

Who we are

maham+ is provided by Maham Plus Limited, registered under number MC 15155, with its registered address at Masdar City, Abu Dhabi, UAE.

On this page, “we”, “us” and “our” mean Maham Plus Limited.

Privacy

This section explains what information we collect on this website and in the maham+ service, why we collect it, and what we do not do with it.

On this website

• No tracking. This website uses no analytics, no advertising and no tracking cookies.
• One cookie. If you use the language link, we set a cookie named maham_lang that remembers whether you prefer Arabic or English. It holds nothing else and expires after one year.
• No third parties. Everything on this website, including its fonts, is served from our own server. Your browser does not contact any other service while you read it.
• Payments. The Subscribe buttons on the Pricing page take you to Stripe, which processes card payments for us; your browser contacts Stripe only when you click one, and the button tells Stripe which language you were reading so that our emails to you use it. Stripe collects your card details, email address and billing details to take the payment, under its own privacy policy. When the payment goes through, Stripe notifies our app automatically and sends us the details of the payment, such as your name, email address, plan and amount, but never your full card number. We use them to apply your plan — to email you a link to create your workspace, or to move your existing workspace to the plan you bought — and then to keep your plan in step with your subscription's renewals, changes and cancellation.
• The contact form. When you send it, we receive by email your name, work email, organization and message, plus the reason you chose, the plan you asked about (if any), the page you came from, your browser's user-agent and your IP address. We also keep a copy in a private file on our server, with the page language and your IP address, so that no message is lost. To stop abuse, we count messages per IP address for one hour, and if a message is discarded as spam we log only the reason and the IP address. We use this only to reply to you and deal with your request, and you can ask us to delete it.

In the maham+ service

• Account information: name, email address, organization and role, and a phone number and profile picture if you add them.
• Workspace content: the projects, tasks, charters, documents, comments and other records your organization creates.
• Security and operational records: sign-in attempts, the audit log of recorded actions with the IP address they came from, and error logs.
• Support tickets: the tickets you raise from Help & Support, the browser details attached to them, and our replies.

We use this information only to provide, secure and support the service for your organization.

The maham+ service currently uses Google Analytics to measure how its pages are used, and loads some interface libraries and fonts from public content-delivery networks. When you use the service, your browser therefore contacts those providers, which receive your IP address and browser details and, for Google Analytics, the pages you visit.

AI features

AI features stay off until your organization connects its own AI provider. When they are on, the text you ask about is sent to that provider under your organization's agreement with it. maham+ has no AI provider of its own.

What we do not do

• We do not sell your information.
• We do not use your information for advertising.
• We do not train AI models on your content.

Where your data is stored

The cloud service runs on servers operated by in the process of migrating to UAE Data Centers. Self-hosted maham+ runs on your own infrastructure, and we have no access to your data on it unless you give it to us. If your users' browsers can reach the internet, its pages also load the Google Analytics tag and the interface libraries described above.

Your rights

You can ask us for a copy of your information, ask us to correct it, or ask us to delete it, by emailing hello@mahamplus.com. We confirm who you are before we act on a request.

On plans that include backup, your organization's administrators can also export its data themselves.

Terms of service

These terms apply when you use maham+. By creating an account or using the service, you accept them for yourself and for the organization you use it for. If your organization has signed a separate agreement with us, that agreement takes precedence.

The service

We provide maham+ as described on this website, within the limits of your plan, and we give you reasonable notice of significant changes.

Acceptable use

Do not misuse the service, try to get around its security controls, share sign-in details, or use maham+ for anything unlawful. Your organization is responsible for the content it puts into maham+ and for the people it gives access to.

Plans and billing

Cloud plans are billed monthly or yearly at the prices on our Pricing page; paying yearly saves up to 17%. You pay through Stripe's secure checkout, and the plan you buy is applied automatically: a new customer receives an email with a link to create their workspace on that plan, and an existing workspace moves to it as soon as the payment goes through (in the few cases where we need to check a payment first, for example when it would lower the workspace's plan, we contact you). A Stripe subscription renews automatically at the end of each period until it is cancelled. You can switch plans, update your card or cancel in Settings → Billing → Manage subscription. If a renewal payment fails and is not made within 7 days, the workspace moves to the Free plan; your data is kept, but the Free plan's limits and features apply. Refunds of prepaid periods: of prepaid periods, prorated for the unused portion, within 30 days of cancellation. Self-hosted maham+ is priced per organization, on terms agreed in writing.

Cancellation and your data

If you pay through Stripe, you can cancel at any time in Settings → Billing → Manage subscription. Cancelling stops the next renewal: your plan stays in place until the end of the period you have paid for, and then the workspace moves to the Free plan with your data kept. If you pay us another way, ask to cancel in Settings → Billing. If you close your workspace altogether, your data is deleted within 30 days of your request, and until then you can ask us for an export of it. We may suspend or end the service for a serious breach of these terms, with reasonable notice.

Liability

To the extent the law allows, our total liability under these terms is limited to Limited to the amount paid in the 12 months before the claim, or $10,000, whichever is lower.

Governing law

These terms are governed by UAE. Any dispute is settled by Courts of Abu Dhabi, UAE.

Changes to this page

When we change this page, we update the date at the top.

Security

How the maham+ service protects your organization's information.