Privacy Policy

Account Information: When you create an account, we collect your email address, name, and company name (optional). If you sign up via Google or Apple, we receive your basic profile information from those services.

Product Data: Product images, brand assets, and style preferences you upload for content generation. This includes any text descriptions or prompts you provide.

Generated Content: Images and videos created using our Service, along with the prompts and settings used to generate them.

Usage Data: Information about how you interact with our platform, including features used, generation history, and session duration.

Payment Information: Billing details processed securely through Stripe. We do not store your full credit card number on our servers.

Service Delivery: To generate content based on your inputs, maintain your account, and provide customer support.

Platform Improvement: To analyze usage patterns, improve our AI models, fix bugs, and develop new features. We may use anonymized and aggregated data for research purposes.

Communication: To send transactional emails (receipts, generation notifications), and occasionally product updates. You can opt out of marketing communications at any time.

Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our Terms of Service.

We never sell your personal data to third parties. We do not use your uploaded images to train our AI models without explicit consent.

Location: Our core infrastructure (database and hosting) is located within the European Union (EU). Some of the sub-processors listed below process data in other jurisdictions, including outside the EU, under Standard Contractual Clauses (SCCs).

Security Measures: We implement industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, and access controls.

Retention: Account data is retained while your account is active. Generated content is stored for 90 days by default. You can request earlier deletion. Upon account termination, we delete your data within 30 days, except where legal retention is required.

Third-Party Processors: We use trusted service providers, each bound by data processing agreements: Supabase (database), Vercel (hosting), Stripe (payments), fal.ai (AI generation), Anthropic, OpenAI, OpenRouter and kie.ai (AI models), Apify (data collection), Resend (transactional email), Backblaze B2 (asset storage), and PostHog (product analytics). Some of these providers process data outside the EU under Standard Contractual Clauses.

Access: Request a copy of all personal data we hold about you.

Rectification: Correct any inaccurate personal data.

Erasure: Request deletion of your account and all associated data ("right to be forgotten").

Data Portability: Receive your data in a machine-readable format.

Restriction: Limit how we process your data in certain circumstances.

Objection: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@maxxing.it. We will respond within 30 days.

Essential Cookies: Required for authentication, security, and basic platform functionality. These cannot be disabled.

Analytics: We use third-party product analytics (PostHog) to understand how users interact with our platform — features used, pages visited, and session activity. We use this to improve the Service, not to build advertising profiles.

No Ad-Network Retargeting: We do not use advertising or retargeting cookies, and we do not share your personal data with advertising networks.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

While our primary infrastructure is in the EU, some service providers may process data in other jurisdictions. In such cases, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Processing Agreements with all third-party processors.

We evaluate the data protection laws of any country where data may be processed.

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

If we learn we have collected data from a child under 18, we will delete that information immediately.

If you believe a child has provided us with personal data, please contact us at hello@maxxing.it.

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and/or a prominent notice on our platform.

The "Last Updated" date at the top of this policy indicates when it was last revised.

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

For any questions about this Privacy Policy or our data practices, contact us at:

Email: hello@maxxing.it

We aim to respond to all privacy-related inquiries within 48 hours.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.