Privacy Notice

1. Who we are
2. This website
3. The Max app: what we collect
4. Information about prospects
5. How we use information
6. Service providers (processors)
7. Where data is processed
8. How long we keep it
9. Your choices and rights
10. Security
11. Children
12. Changes

Who we are

MaxedS LLC (“MaxedS”, “we”) runs this website and the Max app at maxeds-max-app.web.app. We are the controller of the personal information described here. Contact: [email protected], +1 (630) 448-0296.

This website

Our marketing pages (home, Max, Approach, Compare, Pricing, Our record, About, Vision, Accelerator and these policies) set no cookies, run no analytics or advertising scripts and have no forms. Other parts of maxeds.org collect information as follows. Contact form (/talk): your name, email, company, website, LinkedIn URL and message, stored in Google Cloud Firestore and used only to reply to your enquiry. Access requests (for example /tools/buyers): your work email, stored in Firestore and used to respond. SalesBook and the MaxedS app (/tools, /app): what you enter in their forms is sent to our servers to provide the tool, and they keep a few settings in your browser’s local storage; SalesBook’s own notice is at /tools/salesbook/privacy. Our hosting provider, Google Firebase Hosting, keeps standard request logs (IP address, browser type, page and time) for security and operations.

The Max app: what we collect

Your work email, to create your account and send sign-in codes. Sign-in codes, stored only as a hash and expiring after 10 minutes. One session cookie (max_sess: HttpOnly, Secure, SameSite=Strict), signed, valid for up to 7 days and revoked when you sign out. The app uses no other cookies and no analytics or tracking scripts. Your IP address: the app keeps it only as a one-way hash in rate-limit counters that roll over every 24 hours; raw IP addresses appear only in our hosting provider’s request logs. Your workspace data: the websites you ask Max to research, your company profile, customer profiles, target accounts, drafts, writing rules, proof and approvals.

Information about prospects

Max researches companies and the public statements of their executives, from sources such as company websites, annual reports, filings, earnings calls and news. Each finding keeps its source. Max does not scrape LinkedIn and does not buy contact lists.

How we use information

To provide and secure the Max app, sign you in, run the research and drafting you request, support you, prevent abuse, and bill paid units. We do not sell personal information, share it for cross-context behavioural advertising, or use your workspace data to train AI models.

Service providers (processors)

We use these providers to run the service, under contracts that limit their use of your data. Google Cloud and Firebase: hosting, cloud functions and database storage. An email delivery provider: sends sign-in codes. We will name it here once it is in service. Anthropic (Claude API), when AI is enabled: the AI model that researches and drafts from the content you submit and public sources, used under commercial API terms that do not use customer inputs to train models by default. When AI is not enabled, Max’s results are produced by our own rules and no AI provider receives your data. Cloudflare: Turnstile bot protection on sign-up, where enabled. Stripe: processes payments for paid units, only after you approve a unit in writing; nothing is billed automatically. We never see or store full card numbers.

Where data is processed

Our providers process data in the United States and other countries where they operate. Where the law requires it, transfers rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Sign-in codes: 10 minutes. Sessions: up to 7 days. Workspace data: until you delete it or close your account. Security logs: as long as needed for security, normally no more than 12 months. Rate-limit counters: 24 hours. Billing records: as long as tax and accounting law requires.

Your choices and rights

You can ask to access, correct, export or delete your personal information, or to close your account, by emailing [email protected]. We reply within 30 days. If you are in the EU, UK or a US state with privacy rights, you may also object to processing or complain to your data-protection authority. We do not discriminate against anyone for using these rights. Our legal bases are performing our contract with you, our legitimate interest in running a secure service, and legal obligations.

Security

We use TLS encryption in transit, hashed sign-in codes, signed and revocable sessions, rate limits and access controls. No system is perfectly secure; tell us at once if you suspect a problem.

Children

Max is for businesses and is not directed to anyone under 18.

Changes

We will post changes here with a new effective date, and notify account holders by email of material changes.

MaxedS LLC · [email protected] · +1 (630) 448-0296