Security Practices

These Security Practices apply to SmartMaya public websites, product accounts, AI tools, SmartMaya LMS, classrooms, courses, education and training services, implementation services, partner-license support, digital products, support workflows, and related WiselyWise operations where these practices are referenced.

Separate enterprise agreements, school agreements, partner agreements, statements of work, order forms, or signed security terms may add specific commitments for a customer, school, partner, implementation project, or engagement.

WiselyWise uses reasonable administrative, technical, and operational safeguards intended to protect personal data, customer content, account information, learning records, implementation records, support records, billing records, and operational systems.

No internet transmission, cloud service, AI service, integration, email, payment flow, classroom tool, or security measure can be guaranteed as perfect. Security practices continue to evolve as SmartMaya products, services, risks, and customer configurations change.

SmartMaya uses authentication controls, role-based access controls, administrator restrictions, database and storage access controls where implemented, and internal access practices intended to limit access to people and systems that need it for authorized purposes.

Internal access may be used for support, troubleshooting, implementation, security, billing, abuse prevention, legal compliance, account administration, and service operations.

Customers are responsible for managing their own users, administrators, classrooms, invited learners, connected accounts, credentials, passwords, permissions, and workspace configuration.

SmartMaya uses technical and operational controls intended to protect data during service delivery, storage, support, and transmission where supported by the relevant systems and providers.

Data retention, deletion, backup handling, account closure, audit logs, billing records, security records, authority requests, workforce or partner offboarding records, evidence preservation, and legal holds are handled according to the Privacy Notice, Children and Student Privacy Notice, Data Retention and Deletion Policy, Data Processing Addendum, applicable agreement, and legal requirements.

Customers should avoid uploading unnecessary sensitive, regulated, confidential, or high-risk data unless the applicable service, agreement, permissions, safeguards, and notices support that use.

SmartMaya may use AI systems to process prompts, files, context, profile information, learning records, or customer-provided content where needed to provide requested features, personalization, support, or outputs.

WiselyWise uses content safety checks, abuse monitoring, rate limits, usage controls, and review workflows where appropriate to reduce misuse, harmful content, unauthorized access, spam, fraud, and policy violations.

AI outputs should be reviewed by users before reliance, publication, student use, customer use, legal use, business use, or operational deployment.

SmartMaya uses third-party provider categories described in the Subprocessor List to host, store, process, secure, support, bill, communicate, analyze, improve, and deliver services.

For implementation projects, partner-license resale, partner-product setup, referrals, affiliate links, marketplaces, or customer-requested integrations, customer-approved or partner-related providers may also process data needed to activate, configure, administer, support, bill, renew, troubleshoot, or document the relationship.

Provider use depends on the services selected, enabled features, customer configuration, support needs, and applicable agreement.

WiselyWise may investigate suspected security incidents, unauthorized access, abuse, service misuse, policy violations, system faults, or data protection issues.

Where legally required, WiselyWise will notify affected customers, users, schools, authorities, or other relevant parties according to applicable law and contractual obligations.

WiselyWise may preserve logs, access records, customer notices, support records, provider notices, authority requests, screenshots, audit events, and related evidence where needed to investigate incidents, enforce terms, support customers, satisfy legal obligations, or resolve disputes.

Customers and users must use secure credentials, manage access carefully, configure workspaces appropriately, review AI outputs, follow acceptable-use rules, and avoid uploading data that is unnecessary or unsupported for the selected service.

Customers using SmartMaya for schools, students, regulated work, client data, partner licenses, implementation services, or third-party integrations remain responsible for their own deployment decisions, notices, consents, approvals, and user management.

Security, policy, and privacy contact email: [email protected].

Security, policy, and privacy contact phone number: +65-94815474.