Privacy Policy of Mahisoft Inc.
Effective Date: January 1, 2023 · Last Updated: September 26, 2026
Welcome to Mahisoft Inc. ("Mahisoft," "we," "us," "our"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy sets out how Mahisoft collects, uses, shares, and protects the personal information of our job candidates, clients, and website visitors.
Information Collection
We collect personal information that you provide to us when you:
- Apply for a job through our website, email, or other channels
- Send us an enquiry through a form on our website
- Book a meeting with us through our embedded scheduler (Calendly)
- Refer someone for one of our open roles, which means giving us your own name, email address, and country as well as their details
- Use our website and interact with us through social media
Someone may also refer you for a role. When they do, they give us your name and contact details, and may include your location, LinkedIn profile, and CV or résumé.
We also collect some information automatically when you browse our website, using cookies and similar technologies — see Cookies, Analytics, and Advertising Measurement below.
The types of personal information we collect include:
- Your name
- Contact details
- Professional qualifications
- Work history
- Other information relevant to potential employment opportunities
Use of Information
The personal information we collect is used for the following purposes:
- To match candidates with suitable job opportunities
- To communicate with clients and candidates about job placements and other services
- To schedule and hold meetings you book with us
- To contact people who have been referred to us about opportunities
- For internal record keeping and administrative purposes
- To improve our services and website experience
- To understand how our website is used and to measure which of our advertisements lead to enquiries and booked meetings
- For marketing purposes, subject to your consent where required by law
Information Sharing and Disclosure
We may share your personal information with:
- Prospective employers or clients in connection with recruitment services
- Service providers who perform functions on our behalf (e.g., IT services, legal and accounting services)
- Google, which provides the website analytics and advertising measurement described below
- Calendly, LLC, which operates the scheduler you use to book a meeting with us
- Law enforcement or other authorities if required by law
Note: We require all third parties to respect the security of your data and to treat it in accordance with the law.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes:
- Encryption
- Access control
- Secure data storage
- Regular cybersecurity assessments
Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Website analytics data is kept in Google Analytics for 14 months.
Your Rights
You have the right to:
- Request access to your personal data
- Request correction of the personal data we hold about you
- Request the erasure of your personal data
- Object to processing of your personal data
- Request the transfer of your personal data to you or to a third party
- Withdraw consent at any time where we are relying on consent to process your personal data
Anyone, wherever they live, can make a request by emailing info@mahisoft.com. We will respond within a reasonable time, and within 45 days for requests from California residents.
Cookies, Analytics, and Advertising Measurement
Our website uses Google Tag Manager, a Google service that loads the Google tags described below. Whether these tags run depends on your choices and where you are (see Your choices).
Google Analytics.
We use Google Analytics 4 to understand how our website is
used. It collects information such as the pages you view, how you arrived at
our site (for example, the referring website or ad), your browser and device
type, your approximate location derived from your IP address, and your interactions
with the site — for example, clicking a call-to-action button, submitting an
enquiry form, or booking a meeting. We record that a form was submitted
or a meeting was booked, not what you wrote or your booking details. Google
Analytics sets first-party cookies such as
_ga and _ga_<ID>, which by default last up
to two years, to recognize your browser across visits.
Google Ads conversion measurement.
When we advertise on Google, we measure which ads lead to enquiries and
booked meetings. Enquiry-form submissions and booked meetings recorded in
Google Analytics are imported into our Google Ads account as conversions.
If you arrive from a Google ad, an ad click identifier may be stored in
first-party cookies such as _gcl_au or _gcl_aw,
which by default last up to 90 days, so the conversion can be attributed
to that ad.
What we do not do.
- Ad personalization is disabled. Whenever our Google tags run, they tell Google that your data may not be used for ad personalization.
- We do not use remarketing, and we do not build advertising audiences from visitors to our site.
- Google signals is turned off in our Google Analytics account.
- We do not use other advertising networks, social media tracking pixels, or data brokers.
Tracking across other websites.
Other than Google, through the Google Analytics and Google Ads measurement described above, and Calendly, through our booking widget as described in this policy, we do not allow other parties to collect information about your online activities over time and across other websites when you use our site. Google and Calendly handle that information under their own privacy policies.
For more about how Google uses information from websites that use its services, see How Google uses information from sites or apps that use our services.
Scheduling (Calendly).
Some pages let you book a call through a scheduler operated by
Calendly, LLC, which opens in a pop-up on our page and is
embedded from Calendly's own website. Because it is needed to book a call,
it loads only when you choose to book — not as you scroll — whatever your
privacy choices, and even if your browser sends Global Privacy Control.
When you hover over or move keyboard focus to a booking button, your
browser may start fetching the scheduler's files from Calendly in advance;
the scheduler itself opens when you click. When it opens, Calendly may set
its own cookies, and Calendly's scheduler also loads Google's sign-in
service (from accounts.google.com), so your browser contacts
Google at that point. The details you enter to book a meeting (such as
your name, email address, any answers you provide, and the time you
choose) are sent to Calendly and shared with us so we can hold the
meeting.
If the page you land on has advertising campaign parameters in its address
(utm_source, utm_medium,
utm_campaign, utm_term, utm_content
— which can include the search keyword you used), we keep them in your browser's
session storage (mahisoft_calendly_utm) until you close the
tab, and pass them to Calendly when you open the scheduler to book, so we
can see which campaign a booking came from.
We don't pass them to Calendly if your browser sends Global Privacy
Control.
Calendly handles this information under its own Privacy Notice, and its scheduling pages offer their own cookie settings. The privacy choices on our website control our Google tags; they do not control Calendly's cookies or the Google sign-in service it loads.
Your choices.
Use Your Privacy Choices (in our footer) to turn off either of the following, at any time. The privacy notice we show when you first visit also lets you turn off both with one click, using its Turn off both button.
- Site analytics — tells Google Analytics not to store or read analytics cookies on your device.
- Ad measurement — tells Google tags not to store or read advertising cookies on your device, not to send your data to Google for advertising purposes, and to redact ad click identifiers from what is sent.
If you are in the European Economic Area, the United Kingdom, or Switzerland, site analytics and ad measurement stay off unless you turn them on under Your Privacy Choices, or with Turn on both in our privacy notice. When we know your connection comes from one of these countries, Google Tag Manager is not loaded at all until you turn at least one of them on. When we can't tell where you are, Google Tag Manager may load, but our website tells Google's tags to keep site analytics and ad measurement off for visitors Google locates in these countries until they turn them on. When you save, only the choices you set are recorded; a choice shown as "not set" keeps the default for where you are.
Where you are. Our hosting provider tells our website which country your connection comes from, based on your IP address. We add it to the page we send you and use it only in your browser, to apply the right privacy defaults for that country. We don't store it, and we don't send it to Google Analytics, Google Ads, or anyone else.
If you turn off both, Google Tag Manager is not loaded on later page views. If you turned off analytics on an earlier version of our website, we treat that as turning off both. Your choices are saved in your browser's local storage, so they apply to that browser and device only and are lost if you clear your site data; if your browser blocks site storage, site analytics and ad measurement stay off. You can also install the Google Analytics Opt-out Browser Add-on.
Global Privacy Control (GPC). Our site detects and honors the Global Privacy Control browser signal. When your browser sends it, Google Tag Manager is not loaded at all, so neither Google Analytics nor Google Ads measurement runs, and we treat the signal as a valid request to opt out of the sale and sharing of your personal information. This happens without any action on your part and cannot be overridden by the choices above. GPC turns off our analytics and advertising measurement; the embedded Calendly scheduler is a separate service needed to book a call, and it loads only when you choose to book, but without our campaign parameters (see Scheduling (Calendly)).
Do Not Track. Our website does not respond to Do Not Track (DNT) browser signals, because there is no common standard for them. We do honor Global Privacy Control, as described above.
We also keep a few entries in your browser's local storage —
mahisoft_analytics_optout_v2,
mahisoft_ads_optout, and
mahisoft_notice_dismissed_v2 — solely to remember your privacy
choices and whether you have dismissed our privacy notice, and we briefly write
and remove a test entry (mahisoft_storage_probe) to check
that storage works. We read the older entries
mahisoft_analytics_optout, umami.disabled, and
mahisoft_notice_dismissed only to honor choices made on an earlier
version of our website, and remove them when you save new choices or dismiss
the notice. None of these entries are sent to us or to anyone else.
California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you specific rights regarding your personal information. This section serves as our Notice at Collection and describes those rights and how to exercise them.
Categories of personal information we collect. In the past 12 months we may have collected the following categories of personal information. We do not collect precise geolocation.
| Category | Examples | Source | Why we use it | Disclosed to | Sold or shared? | How long we keep it |
|---|---|---|---|---|---|---|
| Identifiers | Name, email address, phone number | You, directly or through Calendly when you book a meeting; people who refer you | Respond to enquiries, hold meetings, recruitment | Service providers (hosting, form processing, email, Calendly) | Not sold or shared | While needed to respond to you and for any business relationship, then as required for legal and accounting purposes |
| Online identifiers | IP address, cookie identifiers, ad click identifiers | Automatically, from your browser or device | Site analytics and ad conversion measurement | May be "shared" as California law defines it; you can opt out | Google Analytics data: 14 months. Ad click cookies: up to 90 days | |
| Internet or other electronic network activity | Pages viewed, how you arrived at our site (referrer), browser and device information, interactions such as button clicks, form submissions, and meeting bookings | Automatically, from your browser or device | Site analytics and ad conversion measurement | May be "shared" as California law defines it; you can opt out | 14 months | |
| Approximate geolocation | Country, region, or city, derived from your IP address | Automatically, from your IP address | Site analytics, and choosing the privacy defaults for where you are | Google (analytics only; the country we use for privacy defaults is not stored or sent) | May be "shared" as California law defines it; you can opt out | 14 months in Google Analytics |
| Professional or employment information | CV or résumé, qualifications, work history | You, or people who refer you | Consider you for current and future roles | Prospective clients or employers, service providers | Not sold or shared | While we consider you for opportunities, or until you ask us to delete it |
| Commercial information | Services you enquired about or engaged us for | You | Provide and manage our services | Service providers | Not sold or shared | For the business relationship, then as required by law |
We use this information for the business purposes described in the table and in Use of Information above, and disclose it to the categories of recipients described in the table and in Information Sharing and Disclosure.
Sale and sharing of personal information. We do not sell personal information for money, and we do not disclose personal information to data brokers. Our use of Google Analytics and Google Ads conversion measurement does, however, involve cookies that send information about your use of our site to Google. We have configured these tools to limit how Google may use that information — ad personalization is disabled, we do not use remarketing or advertising audiences, and Google signals is turned off — but because California law defines "selling" and "sharing" broadly, we give you the right to opt out of them regardless, as described below. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
As a California resident, you have the right to:
- Know / access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we disclose it.
- Delete personal information we have collected, subject to legal exceptions.
- Correct inaccurate personal information we maintain about you.
- Opt out of the sale or sharing of your personal information. Turn off site analytics and ad measurement in Your Privacy Choices, or enable Global Privacy Control in your browser, which we honor automatically.
- Limit the use of sensitive personal information. We do not use or disclose sensitive personal information beyond the purposes permitted under the CPRA.
- Non-discrimination — we will not discriminate against you for exercising any of these rights.
How to exercise your rights. Submit a request by emailing info@mahisoft.com with the subject line "California Privacy Request," or use the Your Privacy Choices control to manage analytics and advertising cookies. We will verify your request using the information associated with you and respond within the timelines required by law (generally 45 days, extendable once). You may use an authorized agent to submit a request on your behalf with proof of authorization.
Shine the Light (California Civil Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.
Children
Our website and services are for businesses and job candidates. They are not directed to children under 13 (or under 16, where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has given us personal information, a parent or guardian can email info@mahisoft.com and we will delete it.
Changes to the Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
Contact Information
If you have any questions about this Privacy Policy, please contact us:
- Email: info@mahisoft.com
Governing Law and Jurisdiction
This Privacy Policy is governed by United States law.