Privacy Policy

1. Introduction

Maxam AI ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Maxam AI platform, including our website, API gateway, and chat services (collectively, the "Services").

This policy applies to all users of the Services. By using the Services and consenting below, you agree to the practices described in this policy. It supplements (and does not replace) our Terms of Service.

2. Information We Collect

2.1 Information You Provide

• Account data: username, email address, and password (stored only as a salted hash);
• Chat content: messages you send through the chat interface, including model selections;
• Support data: information you submit through support tickets, including attachments;
• Payment data: recharge and order records, transaction identifiers, and billing history. We do not store your private crypto wallet keys or full payment credentials.

2.2 Information Collected Automatically

• Usage data: API calls, token consumption, model usage, and feature interactions;
• Technical data: IP address, browser type, device information, access times, and log data;
• Cookies: authentication and session cookies necessary for the Services to function (see Section 5).

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services, including routing your requests to the AI models you select;
• Authenticate you, maintain your session, and secure your account;
• Meter usage, calculate quota consumption, and process recharges;
• Send service-related communications such as verification codes, security alerts, and important notices;
• Respond to support requests and troubleshoot issues;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Monitor and improve the performance, stability, and features of the Services;
• Comply with legal obligations and enforce our Terms of Service.

We do NOT sell your personal information. We do not use your chat content to train our own models.

4. Legal Basis (GDPR)

Where the EU/UK General Data Protection Regulation applies, we process your personal data on the following legal bases:

• Contract: to provide the Services you register for (account creation, API access, billing);
• Legitimate interests: to secure the platform, prevent fraud and abuse, and improve the Services;
• Consent: for optional communications and any processing where we ask for your agreement;
• Legal obligation: to comply with applicable laws.

5. Cookies and Similar Technologies

We use only strictly necessary cookies (such as the auth_token session cookie) to keep you logged in and protect against abuse. We do not use advertising or third-party tracking cookies. You can clear or block cookies in your browser settings, though this may prevent you from signing in.

6. How We Share Information

We share personal information only as necessary to operate the Services:

• AI model providers: your prompts and requests are transmitted to the upstream providers of the models you choose (e.g., DeepSeek, Qwen, Kimi, and other vendors listed on the platform) solely to generate your requested output;
• Payment processors: transaction data is shared with the payment channels you use (e.g., cryptocurrency payment processors) to complete and verify your recharges;
• Service providers: infrastructure providers (hosting, databases, email delivery) under contracts that protect your data;
• Legal requirements: where disclosure is required by law, regulation, or valid legal process.

Upstream AI providers process your prompts under their own privacy policies. We encourage you to review the policies of the model providers whose services you use.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services:

• Account data: retained while your account is active; deleted or anonymized within 30 days after account deletion, except where retention is required by law;
• Chat history: retained until you delete the conversation or your account;
• Billing records: retained for the period required by applicable tax and accounting laws;
• Log data: retained for a limited period for security and troubleshooting purposes.

8. Data Security

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, salted-hash password storage, token-based API authentication, access controls, and rate limiting. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.

9. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, or PIPL), you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information (including account deletion);
• Obtain a copy of your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time where processing is based on consent (this will not affect prior lawful processing);
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via the Support page or email support@maxamai.com. We will respond within the timeframe required by applicable law.

10. Children's Privacy

The Services are not directed at children under 18 (or the age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

11. International Data Transfers

Your information may be processed and stored in data centers located outside your country or region. Where we transfer personal data internationally, we take appropriate safeguards such as standard contractual clauses or equivalent mechanisms as required by applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page with the "Last Updated" date above. Material changes will be communicated to registered users by email or through the platform. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us through the Support page after signing in, or by emailing service@maxamai.com.