1. Data used
The service uses registration and authentication information, preferences, conversation content, files and results you create. It also records usage, access, error and billing data needed for those activities.
Avoid submitting sensitive data or other people's information without a need and authorization. Files and conversations can contain personal data even when their names do not reveal it.
2. Purposes
Data is used to authenticate your account, execute requests, maintain history and preferences, apply permissions, manage subscriptions and investigate errors or abuse. Processing must remain limited to its corresponding purpose.
Providing the service, meeting legal obligations and protecting rights have their own legal bases. Consent is not a blanket authorization: activities that depend on it must allow a choice and withdrawal, without affecting processing that has another legal basis.
3. Content sent to AI
To respond, a model may receive your message, relevant history, accepted files, retrieved document excerpts and enabled project instructions and sources. Access permissions continue to apply to sources.
When enabled, memory may add saved information to the context. You can review, disable and delete memories in Settings. Disabling or deleting a memory does not remove text already sent in a previous request.
To carry out your request, content is processed by AI services outside your device. Reading a source does not make its content public. Processing and retention by these services follow the purposes described in this policy.
4. Who processes your data
The service uses contracted companies for authentication, processing and routing AI requests, payments, storage and infrastructure, and technical performance and navigation measurements. Each activity uses the data needed for its purpose.
Account data, inference content, payment information and technical signals serve different purposes. Processing may take place outside Brazil. Using these services does not remove MaxesFlow’s responsibilities.
You may ask the privacy contact for information about the entities with which your personal data has been shared, the purposes, manner and duration of processing, and the responsibilities of those involved.
5. Apps you connect
When you select a connected account for a message, you allow authorized data to be read to answer that request. The content read may be sent to the model and appear in Chat responses and history.
For diagnostics and security, summary usage records may retain account profile and identification data, information about requests and excerpts of content, such as email subjects, item text or events. These records are not necessarily anonymous.
These records are retained according to a service-wide quantity limit, with cleanup after new records are written, rather than a fixed time period. This does not guarantee a maximum age for records. Individual deletion of these records by person is currently unavailable.
Disconnecting stops new access through that connection, with authorization revocation and cleanup verified separately. To revoke authorization in the connected service, also use that service’s controls. It does not erase text already included in Chat or guarantee removal of these summary records. Account deletion may finish as partial: local data was removed, but some records remain. A pending result means cleanup has not yet been confirmed; the deletion control explains this difference.
6. Workspaces and sharing
Shared content may be accessed by people or links you have authorized. Check permissions and a link's validity before sending it.
Revoking access prevents further authorized retrieval through the service, but does not erase copies someone has already downloaded or received. Workspace membership does not automatically grant access to all members' content.
7. Storage and deletion
History remains available according to the account and resource status, until deletion or applicable expiry. Temporary conversations and expiring files may become unavailable when they expire. Preventing retrieval and cleaning storage are separate steps.
Deletion controls show the request's outcome. An error or interrupted monitoring does not confirm that deletion finished. Records needed for legal obligations, security and evidence of operations may need to be retained; this page does not promise instant removal of every copy.
8. Cookies and preferences
Session cookies maintain authentication. Cookies and local storage also retain choices such as language and appearance. Removing them in your browser may sign you out or reset preferences; it does not delete data held by the service.
Your browser lets you review and remove cookies and local data. This is separate from disabling memory, exporting data or requesting deletion in your account.
9. Your controls and rights
Open Data & Privacy to request an export or deletion of the data offered through your account controls. Deletion requires a separate confirmation.
You may request information about processing, access, correction and other rights under Brazil's LGPD, including deletion and withdrawal of consent where applicable. Exercising these rights is free of charge; identity verification may be needed to protect your data.
10. Contact about privacy
For a request, provide your account email and the right you wish to exercise, with only the information needed to identify the request. Do not send passwords, authentication codes or full card details.