Introduction
Welcome to Maxmodus ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BOS (Business Operating System) service and visit our website at www.maxmodus.com.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
1. Information We Collect
1.1 Information You Provide Directly
Account Information:
- Name and contact information (email address, phone number)
- Company name and business information
- Billing information (processed securely through third-party payment processors)
- Password and account credentials
1.2 Information Collected Automatically
Usage Data:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (operating system, device identifiers)
- Interaction data (features used, session duration, navigation patterns)
1.3 Information from AI-Powered Features
- Responses submitted through BOS discovery sessions
- Workflow and process data shared during AI-guided conversations
- AI-generated insights and analysis derived from your data
2. How We Use Your Information
- To provide, operate, and maintain the BOS service
- To process your account registration and manage your subscription
- To generate AI-powered insights and findings reports for your organization
- To communicate with you about your account, updates, and support
- To improve and develop our services
- To comply with legal obligations
3. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following limited circumstances:
3.1 Service Providers
We share information with trusted third-party service providers:
- Cloud Hosting: Amazon Web Services (AWS)
- AI Services: Anthropic (Claude API) and OpenAI
- Payment Processing: Stripe
- Email Services: Amazon SES
3.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Maxmodus, our users, or the public.
4. Data Security
We implement industry-standard security measures to protect your information:
4.1 Technical Safeguards
- Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access and multi-factor authentication
- Network Security: Firewalls, intrusion detection, and regular security audits
- Secure Infrastructure: AWS with SOC 2 Type II compliance
Important Note: While we implement robust security measures, no system is 100% secure. We cannot guarantee the absolute security of your information.
5. Your Rights and Choices
You have the following rights regarding your personal information:
5.1 Access and Portability
- Right to Access: Request a copy of personal information we hold
- Data Portability: Receive your data in a machine-readable format
5.2 Correction and Deletion
- Right to Correct: Request correction of inaccurate information
- Right to Delete: Request deletion of your personal information
To exercise any of these rights, contact us at privacy@maxmodus.com.
6. Data Retention
We retain your information for as long as necessary to provide our Service:
- Account information: Duration of your account plus 90 days
- Usage logs: 18 months from collection
- BOS discovery data: Duration of engagement plus 90 days, unless you request earlier deletion
7. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete that information immediately.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: Request information about data we collect
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: We will not discriminate against you for exercising your rights
9. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under GDPR:
- Right of access and data portability
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will update the "Last Updated" date and notify you of material changes via email or prominent notice in our Service. Continued use after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns regarding this Privacy Policy:
By using BOS, you acknowledge that you have read and understood this Privacy Policy.