Privacy Policy
This Policy explains what information Maxee collects, why we process it, and what controls are available to users.
Effective date: April 20, 2026
Scope
This Policy applies to Maxee website, desktop app, and related services that reference this Policy.
Where Maxee acts on behalf of a business customer, that customer may be the data controller and additional contractual terms may apply.
Controller and Processor Roles
Depending on the service context, Maxee may act as a controller for account and service administration data, and as a processor for customer-submitted content handled on behalf of business customers.
If you use Maxee on behalf of an organization, that organization is responsible for instructing processing and honoring end-user rights where required by law.
Information We Collect
- Account details such as name, email, authentication identifiers, and profile metadata.
- Billing metadata processed through payment partners when paid plans are enabled.
- Service data such as transcripts, prompts, meeting notes, screenshots, and usage events needed to deliver the product.
- Technical data such as device type, logs, browser details, and diagnostics for reliability and security.
How We Use Information
- Provide and improve assistant features, sync, and support.
- Maintain platform safety, investigate abuse, and prevent fraud.
- Operate analytics, reliability monitoring, and internal reporting.
- Comply with legal obligations and respond to lawful requests.
Legal Bases for Processing
- Performance of a contract (for service delivery and account operations).
- Legitimate interests (for security, abuse prevention, and service improvement).
- Consent (for optional processing where consent is required).
- Legal obligations (for compliance, recordkeeping, and lawful disclosures).
How We Share Information
We share data with subprocessors only when needed to operate core product functions.
- Cloud infrastructure, model providers, and authentication vendors.
- Payment providers for billing workflows.
- Support, messaging, and security monitoring vendors.
- Authorities when required by applicable law.
Data Retention
We retain personal data for as long as needed to provide services, satisfy legal obligations, resolve disputes, and enforce agreements.
De-identified or aggregated data may be retained for product improvement and analytics.
Backups and disaster-recovery copies may retain data for a limited period after deletion until backup expiration cycles complete.
Data Residency and Hosting
Maxee uses Supabase-managed infrastructure for database, authentication, and storage functions.
Project data is hosted in the deployment region selected for that project. If multi-region features are enabled, data may also be processed in any additional configured regions.
Your Privacy Rights
- Request access, correction, deletion, or export of personal data where applicable.
- Withdraw consent for optional processing where consent is the legal basis.
- Opt out of marketing communications using unsubscribe controls.
Government Requests and Safety
Maxee may disclose data when required by law, legal process, or valid governmental request, or when necessary to protect rights, safety, and platform integrity.
Where legally permitted, we may provide notice before disclosure.
Security
Maxee uses administrative, technical, and organizational safeguards to reduce unauthorized access and misuse.
No system is perfectly secure, and users remain responsible for account credential protection.
Regulated Data
Maxee is not intended for regulated healthcare data (including PHI) unless you have separately completed required contractual and technical controls, including any required business associate terms and compliance add-ons.
Children
The service is not intended for children under 16. If we learn personal data was submitted by a child under 16, we will delete it where legally required.
International Transfers and Changes
Data may be processed in countries where Maxee and its subprocessors operate, subject to applicable transfer safeguards where required.
We may update this Policy from time to time. Continued use of the service after an update means the revised Policy applies.