This policy covers two things: this website (trymax.app), and the Max product (web and iOS) as it launches. We've written it to be read, not skimmed past — it's short on purpose.
1. This website
The site collects almost nothing. We don't run advertising trackers and we don't set marketing cookies. Our hosting provider (Vercel) keeps standard server logs (IP address, browser type, pages requested) for security and reliability. If you email us, we keep your email and message so we can reply and remember the conversation.
2. The Max product — what it is
Max is a personal assistant. With your permission, it connects to accounts you already use — for example your email, calendar, documents, or advertising accounts — and does work you ask for: reading, summarizing, drafting, scheduling, watching for changes, and making changes that you individually approve.
3. What we collect, and why
- Account details — your name, email, and sign-in information, so you can log in and we can reach you.
- Connected-account data — the content Max needs to do the specific work you ask for (e.g. reading an email thread to draft a reply). Max only accesses services you have explicitly connected, and only with the permissions you granted.
- Things Max remembers — facts and preferences you ask it to keep ("we sell chairs in lots of 40"), stored so it can help you better. You can view, edit, or delete these at any time.
- Usage and diagnostics — technical records of what the product did (which actions ran, how long they took, what failed), used to keep the service reliable and to support you. These records are designed to describe what happened, not to copy the content of your messages and documents.
- Billing — handled by our payment provider (Polar Software, Inc., acting as merchant of record). We never see or store your card number.
4. What we never do
- We never sell your data, to anyone.
- We never show you advertising, and we don't use your data to help anyone else advertise to you.
- We never share one customer's data with another customer.
- We never use your private content to train AI models available to others.
- Actions that leave your account — sending an email, changing a record, adjusting a campaign — never happen without your explicit approval.
5. Google user data
If you connect a Google service (such as Gmail, Google Calendar, Google Drive, or Google Ads), Max's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In plain words: Google data is used only to provide the features you asked for, is never sold, never used for advertising, and never used to train generalized AI models. You can disconnect a Google account at any time from within Max or from your Google account's security settings, and we delete the associated access credentials when you do.
6. Service providers
We use a small set of processors to run Max: cloud hosting and compute (Vercel), database (Neon), file storage (Cloudflare), AI model providers (used to process the specific requests you make), error and performance monitoring, transactional email (Resend), and payments (Polar). Each receives only what it needs to do its job, under contractual confidentiality and data-protection terms.
7. Retention and deletion
We keep your data while your account is active. If you delete your account, we delete your data within 72 hours, after a short cooling-off window that protects you from accidental deletion. You can also ask Max to "forget" specific things immediately. Backups age out on a fixed schedule, and our restore procedures replay deletions so removed data stays removed.
8. Security
Data is encrypted in transit and at rest. Access credentials for your connected accounts are stored in an encrypted vault, isolated per customer. Our own staff access follows least-privilege rules, and every sensitive operation is logged in an append-only audit trail.
9. Your rights
You can access, correct, export, or delete your data at any time — from inside the product, or by emailing hello@trymax.app. If you're in a jurisdiction with specific privacy rights (such as the GDPR or Indonesia's PDP Law), we honor those rights regardless of where you are.
10. Changes
If this policy changes in a way that matters, we'll tell you inside the product and by email before the change takes effect — not after.
11. Contact
trymax · Jakarta, Indonesia · hello@trymax.app