PRIVACY POLICY

MaxximusAI, Inc. ("Maxximus," "we," "us," or "our") operates the Maxximus AI platform, including the website at maxximus.ai, our mobile applications, and our AI coaching services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Maxximus, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Service.

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

• Name and email address (preview program enrollment, account creation)
• Coaching conversations and text exchanges you submit to our AI
• Per-message feedback ratings (thumbs up/down) and the content of messages you rate, collected to evaluate and improve our AI coaching quality
• Free-text session feedback you choose to submit, including session context such as message count
• Responses to onboarding questions ("The Initiation")
• Profile information and preferences
• Payment information (processed securely via Stripe — we do not store card numbers)

1.2 Information Collected Automatically

• Device information (device type, operating system, browser)
• IP address and approximate location
• Usage data (pages visited, features used, session duration)
• Log data and crash reports
• Cookies and similar tracking technologies

1.3 Information from Third-Party Platforms

When you connect your social media accounts or grant our application access through Meta (Instagram/Facebook), TikTok, or other platforms, we may collect:

• Your public profile information (name, username, profile photo)
• Content you have posted publicly on those platforms
• Comments and interactions on our business accounts
• Messaging data (only when you initiate contact with our accounts)
• Basic account metadata provided by the platform

We access Meta platform data only to the extent necessary to provide our Service features — including publishing coaching content, responding to comments via our AI, and managing our business presence. We do not sell, transfer, or use Meta platform data for advertising targeting or profiling beyond the stated purposes. All use of Meta platform data complies with theMeta Platform Terms.

2. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Provide, operate, and improve the Maxximus AI coaching Service
• Personalize your coaching experience based on your goals and history
• Process transactions and send related information (receipts, confirmations)
• Send you service updates, security alerts, and administrative messages
• Respond to your comments, questions, and requests
• Publish and manage content on our social media accounts (with your consent where required)
• Reply to public comments on our social media accounts via our AI coaching system
• Monitor and analyze usage patterns to improve the Service
• Evaluate AI coaching quality and product experience through feedback collected during preview or beta programs, including per-message ratings, message content associated with those ratings, and free-text session feedback
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations
• Aggregate and anonymize coaching interaction data to improve our AI models through our "Collective Intelligence" system — all users are automatically enrolled; data is always anonymized and never linked to your identity; you may opt out at any time by contacting us at privacy@maxximus.ai

3. AI PROCESSING AND DATA

Maxximus AI uses large language models to generate coaching responses. When you interact with our AI:

• Your conversation content is processed by xAI (the company behind Grok), our AI language model provider, pursuant to a data processing agreement. xAI's privacy policy is available at x.ai/privacy
• Conversation data may be retained to provide continuity across sessions
• We do not use your personal coaching conversations to train third-party AI models without your consent
• Anonymized, aggregated data may be used to improve Maxximus's own coaching capabilities

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We work with trusted third-party vendors who assist us in operating our Service. These include:

• Supabase — database and authentication
• Vercel — hosting and infrastructure
• Stripe — payment processing
• xAI (Grok) — AI language model infrastructure that processes your conversation content to generate coaching responses (bound by data processing agreement; see xAI Privacy Policy)
• GoHighLevel (GHL) — CRM, account management, and transactional email. When you create an account or enroll in our preview program, we automatically create a contact record in our CRM to manage your account and send service communications. Your account record may include access-tier identifiers (for example, "preview-user") used solely for service management and communications purposes.
• ElevenLabs — voice synthesis for content
• Meta Platforms — social media API integration

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

4.3 Business Transfers

If Maxximus is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5. META PLATFORM DATA — SPECIFIC DISCLOSURES

Our application integrates with Meta's platforms (Instagram and Facebook) through the Meta Graph API. In connection with this integration:

• We access your Instagram and/or Facebook account data only with your explicit authorization
• We use this access solely to publish content on our own business accounts, read and respond to public comments on our posts, and manage our business page presence
• We do not access the personal accounts of our users through Meta APIs
• Meta platform data is not used for ad targeting, data brokering, or any purpose outside of operating our social media presence and coaching features
• You may revoke our app's access to your Meta account at any time through your Facebook/Instagram Settings > Apps and Websites
• We retain Meta platform data only as long as necessary to provide the Service or as required by law

6. DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it (e.g., financial records). Anonymized aggregate data may be retained indefinitely.

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how our Service is used. You can control cookie settings through your browser. Note that disabling cookies may affect certain features of the Service.

We do not use cookies for cross-site advertising tracking or sell cookie data to third parties.

8. YOUR RIGHTS AND CHOICES

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Opt-out: Opt out of Collective Intelligence data contribution at any time by contacting us at privacy@maxximus.ai
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@maxximus.ai. We will respond within 30 days.

9. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of personal information — we do not sell personal information
• The right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at privacy@maxximus.ai.

10. GDPR — EUROPEAN USERS

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service you have requested
• Legitimate interests: Improving our Service, fraud prevention, security
• Consent: Where you have explicitly consented (e.g., marketing emails)
• Legal obligation: Where we are required to process data by law

You may lodge a complaint with your local data protection authority if you believe we have not handled your data in accordance with GDPR.

11. CHILDREN'S PRIVACY

Maxximus AI is intended for users 18 years of age and older and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If we discover that a person under 18 has provided us with personal information, we will delete it immediately. If you believe your child has provided us information, contact us at privacy@maxximus.ai.

12. SECURITY

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encrypted database storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. THIRD-PARTY LINKS

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will also send an email notification to registered users. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

15. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy, contact us: