Mahalo Ai Privacy Policy
Dated: August 17, 2025
Mahalo Ai LLC and its affiliates (referred to as “Mahalo,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy (the “Policy”) governs the website givemahalo.com (“Site”) that display or links to this Policy, as well as all products and services provided by Mahalo on the Site (collectively, the “Services”). This Policy describes the types of personal information Mahalo collects from and about you, how Mahalo may use and disclose such information, and your choices and legal rights with respect to such information.
We collect, use, disclose, and otherwise process your personal information only in accordance with applicable data protection and privacy laws and this Policy. By using the Services, you agree to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree, please do not access or use the Services. For purposes of this Policy, “personal information” refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you.
STATE-SPECIFIC PRIVACY NOTICES
California residents, please see our [CALIFORNIA PRIVACY NOTICE][Insert link to below]. Residents of Virginia, Colorado, Connecticut, Utah, Oregon, or Texas, please see our [COLORADO, CONNECTICUT, DELAWARE, IOWA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TEXAS, UTAH & VIRGINIA PRIVACY NOTICE][Insert link to below]. Nevada residents, please see our [NEVADA NOTICE][Insert link].
NON-US RESIDENT PRIVACY NOTICE
If you are in the UK, EU, or other country outside of the United States, please see our [NON-U.S. RESIDENT PRIVACY NOTICE][Insert link to below].
- INFORMATION WE COLLECT
Depending on your use of the Services and how we otherwise interact with you, we may collect or obtain information from and about you in several ways, including (A) directly from you; (B) automatically when you interact with the Digital Services (as defined below); and (C) from third parties.
Personal Information You Provide
Mahalo collects personal information from you when you choose to share it with us. This may include when you use the Services; register or create an online account with or through the Services; purchase products or services; request information from us; sign up for subscriptions, newsletters, or our email list; use the Site; fill out a survey administered by us (or on our behalf); request customer support; or otherwise communicate with or contact us.
The personal information we collect may include your biographical information (i.e., name, physical address, email address, telephone or mobile number), registration information (i.e., username), and preferences related to particular product or services.
Personal Information You Share Publicly or With Others When You Use the Services
You may choose to provide comments, reviews, or other content when you use our Site. Any information you may disclose in a public manner on our Site or other public forums (including third-party websites, applications, or services) is publicly available. Please exercise caution when disclosing personal information in these public areas.
Certain Services may also offer you the ability to message with us. Mahalo may store this information as reasonably necessary to achieve a legitimate business or commercial purpose, such as providing you with or billing you for the Services, maintaining and operating the Services, and as necessary to protect Mahalo’s legal interests.
Personal Information You Provide When You Make a Purchase
If you purchase a paid subscription or other product or service from us, we or our third-party payment processors may collect a payment card number and related financial information (such as CVV, expiration date, and billing address) or information about other payment methods. Mahalo does not collect or retain your payment card information.
Personal Information Automatically Collected
Whenever you visit or interact with the Site, including accessing the Services and interacting with electronic or digital communications (collectively, the “Digital Services”), we (and our service providers) may use cookies, web beacons, pixel tags, or other technologies to automatically or passively collect information about your online activity, your location, and your use of the Digital Services. Specifically, we (and service providers) may automatically collect the following types of personal information when you interact with the Digital Services:
Device Information: When you access the Digital Services, information about your device may be collected, including IP address and/or other unique identifiers, browser type, device type, operating system, software version, hardware model, and mobile network information.
Usage Information: When you interact with the Digital Services, certain information may be collected, including the date and time of your visit, the pages you view immediately before and after you access the Digital Services, the areas or pages that you visit, the amount of time you spend viewing or using the Digital Services, the number of times you return, and other click-stream or site usage data. Additionally, if you receive an email from us, information may be collected about your interactions with the message (e.g., whether you opened, forwarded, or clicked-through to our Services).
Location Information: Information about your device’s general geographic location may be automatically collected when you access the Digital Services.
We also may use third-party analytics and tracking tools to better understand who is using the Digital Services, how people are using them, and how to improve their effectiveness as well as the effectiveness of any related content.
You may adjust your device or Internet browser settings to limit certain tracking or to decline cookies, but by doing so, you may not be able to use certain features or take full advantage of all our offerings. Please refer to your device’s settings or your Internet browser’s “Help” section for more information on how to delete cookies and/or disable your device or browser from receiving cookies or adjust your tracking preferences.
Combination of Personal Information
We may combine the personal information we receive from and about you, including information you provide to us and information we automatically collect through the Digital Services, and information collected offline. We use, disclose, and protect combined personal information as described in this Policy.
- INFORMATION WE USE
Mahalo may use the personal information we collect to fulfill our contractual obligations to you and for a variety of legitimate business or commercial purposes, including:
To provide the Services, including content on our Site; subscription-based, membership-based, or other paid Services we offer; and the products we sell via the Services.
To fulfill your orders.
To communicate with you, including to respond to your inquiries/requests and request feedback from you. We may also use your personal information to invite you to participate in surveys administered by us (or on our behalf). Additionally, from time to time, we may use your personal information to send you important updates and communications about this Policy and/or other applicable terms and conditions.
To create a profile for you.
To protect the security and integrity of the Services and our business, such as by protecting against and preventing fraud, unauthorized transactions, claims and other liabilities and managing risk exposure, including by identifying potential hackers and other unauthorized users.
To understand the usage and operations of our Services; develop new products or services; and conduct analysis to enhance or improve our content, products, and services.
To send you newsletters and other marketing and promotional materials from Mahalo. Details on how to exercise your choices with respect to marketing and promotional communications from us can be found in the “Your Choices and Legal Rights” section below.
To comply with applicable laws and regulations and to respond to lawful requests and communications from law enforcement and other government officials.
To carry out sales and business transactions in which information held by us is among the assets transferred or is otherwise relevant to the evaluation, negotiation, or completion of the transaction.
To protect our rights, privacy, safety, property, and/or those of others.
Additionally, we may use your personal information for other purposes disclosed at the time you provide your information or otherwise with your consent.
Please note that we may also de-identify or aggregate information so that it will no longer be considered “personal information” and use such information for analytics purposes or other purposes consistent with those described in this Policy.
- INFORMATION DISCLOSURE
We may disclose each of the categories of personal information we collect from and about you with the following categories of recipients:
Our Affiliates: We may disclose your personal information to Mahalo affiliates for business, operational, promotional, and marketing purposes.
Our Service Providers: We disclose your personal information to third parties that provide business, professional, marketing, analytics, or technical support services to us; help us operate our business and the Services; or administer activities on our behalf. We require our service providers to only use your personal information in connection with providing services to Mahalo.
Competent Governmental and Public Authorities: We will disclose your personal information as necessary to respond to subpoenas, judicial processes, or government requests and investigations, or in connection with an investigation on matters related to public safety. We may disclose your information to protect the security of our Services, servers, network systems, and databases. We also may disclose your information as necessary, if we believe that there has been a violation of our [Terms of Service][insert link], any other legal document or contract related to our Services, or the rights of any third party.
Relevant Third Parties in Connection with a Business Transaction: We may sell or purchase assets during the normal course of our business. If another entity acquires us or any of our assets, your personal information may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, your personal information may be considered an asset of ours and may be sold or transferred to third parties. Should such a sale or transfer occur, we will use commercially reasonable efforts to try to require that the transferee use the transferred personal information in a manner that is consistent with this Policy.
Other Parties: We may disclose your personal information to other parties as we believe necessary or appropriate either to: (i) comply with applicable law; (ii) protect our operations and those of our affiliates; (iii) investigate and prevent against fraud; (iv) protect our rights, privacy, safety, or property and/or those of others; or (v) allow us to pursue available remedies or limit damages that we may sustain.
Please note that we may also de-identify or aggregate personal information so that it will no longer be considered “personal information” and disclose such information to third parties for any purpose as permitted by law, including for marketing or analytics purposes.
- YOUR CHOICES AND LEGAL RIGHTS
We respect your privacy and provide you with information about our processing of your personal information and the ability to exercise control over our use of your information. This section of our Policy outlines: (a) your choices about how we use your personal information; (b) your legal rights related to your personal information based on where you reside; and (c) specific disclosures required by law in certain States and other territories.
Your Choices
We provide you with the ability to make certain choices about how we use your personal information, as described below.
Marketing and Promotional Communications: You can opt out of receiving marketing and promotional communications from us at any time by using the contact information below or following the instructions included in any marketing or promotional communications that you receive from us. Note that even if you opt out of receiving marketing and promotional communications from us, you will still receive non-marketing or transactional messages from us, including messages about your account and responses to your inquiries/requests.
Cookies: As noted above, we (and our service providers) use cookies on the Site for various purposes, including for analytics and advertising purposes. [To adjust your preferences with respect to the cookies deployed on the Site, use our cookie preference tool found by clicking “Manage Cookie Preferences” in the footer of the Site.]
Your Legal Rights
Depending on where you reside or were located when we collected your personal information, you may have certain rights in relation to your personal information, as described below. For more information about jurisdictions where these options are available, please read the additional instructions immediately following the list of rights below.
Right of Access:
You may ask us to confirm whether we are processing your personal information and, if so, details regarding our processing of the personal information.
You may also request that we provide your personal information to you.
You may request information about our disclosure of your personal information to third parties, including a list of any third parties to whom we disclosed your personal information for marketing purposes.
Right to Delete: Subject to certain exceptions, you may request that we delete your personal information. There are some reasons we will not be able to fully address your request, such as if we need to complete a transaction for you, to detect and protect against fraudulent and illegal activity, to exercise our rights, or to comply with a legal obligation.
Right to Correct: Subject to certain exceptions, you may request that we correct inaccuracies in your personal information. We will take commercially reasonable efforts to make the corrections that you request.
Right to Revoke Consent: We may seek your affirmative consent to process your personal information for certain purposes. Where applicable, you may revoke your consent at any time.
Right to Limit Certain Processing Activities or to Object to Certain Processing Activities: Where we have not sought your affirmative consent to process your personal information, you may have the right to limit or object to our continued processing of that personal information.
If you exercise any of the foregoing rights, we will not discriminate against you.
To make a request, please email us at [info@givemahalo.com] to submit a request or you may send a letter to the address in the “How to Contact Us” section below. When we receive your request, we will provide additional information about the timing of our response, any additional information we may need from you, and if we are unable to fully comply with your request. We will endeavor to respond to your requests within the timeframe established by the applicable law. If we need additional time to respond to your request, we will inform you of the reasons why. If we decide not to take action on your request, we will explain the reasons why. We may place reasonable limits on responding to repeated requests, where allowable by law. In order to protect your privacy, we may require proof of your identity before we can act on your request. Where applicable, we will use the requested information for verification purposes only. We may decline certain requests if we cannot verify your identity and confirm the personal information we maintain relates to you.
If we decide not to take action in response to your request, you may submit an appeal by email at [info@givemahalo.com.] In your email, you must put the statement “Privacy Rights Appeal” in the subject field and provide enough information for us to understand the request you made and the rationale for the appeal. We will resolve your appeal within the timeframes established by applicable law. If your appeal is denied, we will explain why. If you continue to dispute our decision or would like to lodge a complaint regarding our handling of your personal information, you may contact the regulator in your jurisdiction that handles privacy complaints. See below for a list of contact information for the relevant regulatory bodies in select jurisdictions.
European Union: https://edpb.europa.eu/about-edpb/about-edpb/members_en
Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
United Kingdom: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/
CALIFORNIA PRIVACY NOTICE
Pursuant to the CCPA, we are providing the following additional details regarding the categories of personal information that we collect, use, and disclose. Please see the “Your Legal Rights” section immediately above for the rights available to you in relation to your personal information and how you can exercise them.
Personal Information Collection and Disclosure
The following chart details which categories of personal information we have collected from and about California residents in the past twelve (12) months, the source(s) of each category of information, and the categories of third parties to whom we have disclosed each category of information for a business purpose. We do not “sell” or “share” information with any third parties (as such terms are defined in the CCPA). Please note that the first column in the chart lists by category the types of information described in the “Information We Collect” section above, as required by the CCPA.
Category of Personal Information
Categories of Sources
Disclosure of Personal Information for a Business Purpose
Identifiers, including names, physical addresses, email addresses, online identifiers, IP address, account names and other similar information
Directly from Individuals
Through automated means
We have disclosed this category of information to our service providers
Commercial information, including services purchased, obtained or considered
Directly from Individuals
Through automated means
We have disclosed this category of information to our service providers
Internet or other electronic network activity information, including interactions with the Digital Services
Through automated means
We have disclosed this category of information to our service providers
Geolocation data, such as IP location
Though automated means
We have disclosed this category of information to our service providers
Inferences, meaning inferences drawn from any of the information in the above-listed categories of information.
Though automated means
We have disclosed this category of information to our service providers
Sensitive personal information, including account log-in information in combination with passwords and individuals’ precise geolocation information.
Directly from Individuals
Through automated means
We have disclosed this category of information to our service providers
Purposes for Collecting Personal Information
As described in more detail in the “Information Use” section above, we collect personal information to provide and manage the Services, fulfill our contractual obligations to you, and achieve a variety of legitimate business or commercial purposes.
Disclosures of Personal Information
As detailed in the “Information Disclosure” section above, we disclose personal information to fulfill the purposes described above. We will also disclose certain categories of personal information to competent governmental and public authorities and other third parties as necessary or appropriate, including when we have a legal or contractual obligation to disclose the information.
Sale and Sharing of Personal Information
We do not “sell” or “share” (as such terms are defined in the CCPA) personal information to and with third parties and have not “sold” and “shared” personal information in the past twelve (12) months. (This includes “selling” or “sharing” the personal information of individuals we know to be under 16 years of age.)
Use and Disclosure of Sensitive Personal Information
We do not collect “sensitive personal information” (as defined in the CCPA).
Retention of Personal Information
We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal or reporting requirements.
COLORADO, CONNECTICUT, DELAWARE, IOWA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TEXAS, UTAH & VIRGINIA PRIVACY NOTICE
Notice of Collection
To learn more about the categories of personal data we collect about you and how we use it, please see Information We Collect above. To learn more about how we use that information, please see Information We Use. To learn more about the categories of third parties with whom we may share your personal data, please see Information Disclosure.
Rights
You have a right to submit a request to know, delete, correct (other than Utah), and to opt-out of the sale or processing of your personal data for targeted advertising purposes (though Mahalo does not process information for targeted advertising purposes). If you live in Oregon, you also have a right to request a list of specific third parties to which Mahalo has disclosed your personal data. You also have a right to appeal a denial of any of these requests. To learn more about these rights, see Your Choices and Legal Rights above.
NEVADA NOTICE
Sale of Personal Information
If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of your personal information. We do not sell your personal information as defined under Nevada law. However, to request email confirmation that we do not sell your personal information, please send e-mail to email to [info@givemahalo.com] with “Nevada Opt-Out of Sale” in the subject line and in the body of your message. We will provide the requested information to you via an email response.
NON-U.S. RESIDENT PRIVACY NOTICE
Role and Data Controller Contact Details
The General Data Protection Regulation (“GDPR”) and other related laws distinguish between organizations that process personal information for their own purposes (known as “controllers”) and organizations that process personal information on behalf of other organizations (known as “processors”). We act as a controller with respect to personal information collected from you as you engage with our Services. If you have questions with respect to our processing of your information as a controller, you can contact us by email at the email address set forth in the section entitled “How To Contact Us” below.
Lawful Basis for Processing
The GDPR and related laws require a “lawful basis” for processing personal information. Our lawful bases include the following:
Consent: We may collect, use, and disclose your personal information on the basis of the consent that you provide us at the point of information collection or disclosure.
Contractual necessity: We may collect and use certain personal information where it is either necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. This may include personal information used to provide you with the Services and related transaction information.
Compliance with a legal obligation: We are subject to various legal requirements in the jurisdictions in which we operate, and we may use, disclose, and retain your personal information if necessary for us to comply with a legal obligation arising under an applicable law to which we are subject.
Legitimate interests: We may collect and use your personal information to the extent necessary to carry out our legitimate interests (or those of a third party), provided that such interests do not outweigh your interests or fundamental rights and freedoms. For example, we may collect and use your personal information in reliance on a legitimate interest in managing our relationship with you; conducting and managing our business; providing you with customer support; developing and enhancing the Services; detecting and preventing fraud and other harmful activities; and monitoring and maintaining the security of our information, systems, and networks.
Onward Transfer
Mahalo is a global business and it, or its service providers, may process, transfer, and store personal information on servers located in a number of countries inside of the EEA (e.g., Germany) and UK or outside of the EEA and UK, including in the United States and Canada. Since we are committed to protecting your personal information, we take steps to ensure that there are appropriate safeguards in place when we transfer personal information across international borders. If the GDPR applies and your data is transferred outside the UK or the EEA to the United States or any other country, we will transfer your personal information subject to appropriate safeguards, such as an adequacy decision by the European Commission on the basis of Article 45 of Regulation (EU) 2016/679 or Standard Contractual Clauses, as provided from time to time by the European Commission. You can receive additional information about where your personal information is transferred and the appropriate safeguards by contacting us.
Your Data Subject Rights
Your Rights. If you are a data subject under the GDPR or similar jurisdictions, subject to certain conditions, you have the right to:
Access, rectify, or erase any personal information we process about you;
Data portability – that is, asking us to transfer your personal information to any third party of your choice;
Restrict or object to our processing of your personal information; and
Where applicable, withdraw your consent at any time for any processing of your personal information.
Please see “Your Legal Rights” above for more information on how to exercise these rights.
Complaints
If you have a complaint about our use of your personal information or our response to your request(s) regarding your personal information, you may submit a complaint to the Data Protection Supervisory Authority in your jurisdiction. We would, however, appreciate the opportunity to address your concerns before you approach a data protection regulator and welcome you to first direct an inquiry to us. Please see our contact information set forth below.
- THIRD-PARTY SERVICES
The Digital Services may include links to third-party websites. We have no control over the personal information that is collected, stored, or used by third-party websites, and we are not responsible for their information handling or privacy practices. Your use of these third-party services is subject to each provider’s privacy policy, so we encourage you to read these policies carefully.
- CHILDREN’S PRIVACY
Protecting children’s privacy is important to us. We do not direct the Services to, nor do we knowingly collect any personal information online from children under the age of 16. Please contact us if you are a parent or guardian of a child under the age of 16 and you believe that we may have collected personal information online from your child. If we learn that a child under the age of 16 has provided personal information online through the Services, we will use reasonable efforts to delete such information.
- INFORMATION RETENTION
We will retain your personal information as long as necessary to fulfill the purposes outlined in this Policy, including to satisfy our legal or reporting requirements, unless a longer retention period is required or allowed under law. If we de-identify information, we will maintain and use the information in de-identified form and not attempt to re-identify the information except as required or permitted by law.
- INFORMATION SECURITY
We take reasonable and appropriate physical, administrative, and technical steps to safeguard the personal information we collect from and about our customers and users of the Services. However, no security system is perfect, and we cannot guarantee the absolute security of your personal information.
- REVISIONS TO THIS POLICY
We reserve the right, in our sole discretion, to change, modify, add, remove, or otherwise revise portions of this Policy at any time. The “Effective Date” at the top of this page indicates when this Policy was last revised. When we make changes, we will revise the date at the top of this page to reflect the date such changes occurred. Unless otherwise stated, your continued use of the Services following the posting of a revised version of this Policy constitutes your acceptance of the changes.
- HOW TO CONTACT US
Mahalo International Group, LLC is the controller and business responsible for processing your personal information as set forth in this Policy, except as expressly noted herein.
If you have any questions about this Policy or our information handling and privacy practices, you may contact us at [info@givemahalo.com] or by mail to:
Mahalo Ai LLC
c/o Privacy Info
2650 W Belleview Ave Suite D-100
Littleton CO 80123