Privacy Policy

Maxrall, Inc. ("Maxrall," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website maxrall.com, or when you use any of the products and services we provide — including our product Nexrall (nexrall.com).

By accessing our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use.

2.1 Information You Provide

• Name and email address when you contact us
• Messages or inquiries submitted through our contact forms
• Business or professional information if relevant to your inquiry

2.2 Information you provide and generate in our products

• Account details, such as your name, email address, password, profile information, and the role you hold within a company
• Content you submit or create in a product, such as the instructions and questions you give an agent, the documents and messages you produce, and the output a product generates for you
• Files you upload or connect, such as documents, images, and the code or workspace you ask a product to work with
• Records of how you use a product, such as the features you use, the requests you make, and the results you act on, which we use to operate, secure and improve the service

2.3 Automatically Collected Information

• Log data: IP address, browser type, pages visited, time and date of visit
• Device information: hardware model, operating system, unique device identifiers
• Usage data: how you interact with our website (via cookies and similar technologies)

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Improve and optimize our website and services
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues or security threats
• Keep our services trustworthy: detect fraudulent, abusive, or misrepresented accounts and content, and handle reports and moderation
• Provide the AI assistance you request in a product, such as drafting a document, running research, or generating code
• Administer subscriptions and trials, and process payments
• Comply with applicable legal obligations
• Send administrative communications (e.g., updates to this policy)

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

For users in the European Economic Area (EEA), our legal bases for processing personal data include:

• Consent — where you have given explicit consent
• Legitimate interests — to operate and improve our services
• Legal obligation — where required by applicable law
• Contractual necessity — to fulfill services you've requested

As an AI technology company, Maxrall may use anonymized and aggregated data to improve our AI models and services. We do not use personally identifiable information to train AI models without your explicit consent.

Where a Maxrall product offers an option to control whether your content is used to improve our AI models, that setting is available in the product's account or data-control settings (e.g., a "Data Controls" or "Improve the model" toggle), and we will honor your selection going forward. Consumer-tier accounts default to standard retention and model-improvement settings described in the applicable product policy unless you opt out; business, team, and enterprise accounts are not used to train our models absent a separate written agreement.

What the AI features use. The content you submit and the workspace you connect to an agent are processed in order to carry out the task you asked for. AI output is produced for you to review and act on; it does not produce decisions that have legal or similarly significant effects on you, and any decision you take on the basis of it is your own.

Our AI products — including Nexrall and any future services — are governed by their respective product privacy policies. Those policies take precedence for data processed within those products.

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

• Essential cookies — necessary for the website to function
• Analytics cookies — help us understand how visitors use our site
• Preference cookies — remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

We may share your information with:

• Service providers — third-party vendors who assist in operating our website and services (e.g., cloud infrastructure, analytics), bound by confidentiality agreements
• Fraud-prevention providers — services that help us detect fraudulent or abusive activity
• Payment processors — the processor that handles subscription payments (currently Stripe), which receives the payment details you enter and the billing information needed to complete the transaction
• Legal authorities — when required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets

We retain personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact inquiries are typically retained for 24 months. Analytics data may be retained in aggregated, anonymized form indefinitely.

If you ask us to delete your account, we delete or de-identify the personal data we hold about you, except where we must keep it for one of the reasons above, or where it has already been shared with another user — for example a message you sent — and cannot be recalled.

Depending on your location, you may have the following rights:

• Access — request a copy of personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request erasure of your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdrawal of consent — where processing is based on consent

To exercise these rights, contact us at privacy@maxrall.com. We will verify your request using information reasonably necessary to confirm your identity, and we will respond within the time required by applicable law (for example, within 45 days for California residents, extendable once by an additional 45 days when necessary). You will not receive discriminatory treatment for exercising any of these rights.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you the rights described in Section 9 above, as well as the following California-specific rights:

• Right to know — the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it
• Right to opt out of "sale" or "sharing" — we do not sell personal information for money. However, our use of certain analytics or advertising cookies may be considered a "sale" or "sharing" under the CCPA's broad definitions. You may opt out at any time by emailing privacy@maxrall.com with the subject "Do Not Sell or Share My Information," or by enabling a recognized opt-out preference signal in your browser, such as the Global Privacy Control (GPC), which we honor as an opt-out request
• Right to limit use of sensitive personal information — where applicable
• Right to non-discrimination — we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised a privacy right

We do not knowingly sell or share the personal information of individuals we know to be under 16 years of age without opt-in authorization.

Residents of Virginia, Colorado, Connecticut, Utah, and other U.S. states with comprehensive privacy laws have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling. You may exercise these rights using the contact details in Section 14. You may also designate an authorized agent to submit requests on your behalf, subject to identity verification.

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption for data in transit, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

Maxrall, Inc. is incorporated in Delaware, USA. If you access our services from outside the United States, your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.

In the event of a security incident that compromises the confidentiality, integrity, or availability of your personal information, we will notify affected individuals and, where required, applicable regulators without undue delay and in accordance with applicable law.

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@maxrall.com.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of our website after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact: