Privacy isn't a policy document with us. It's how the product is built. Here's exactly where your data lives.
Stays on your computer (always)
- Your files and documents: anything your agent reads, creates, or organises
- Your conversation history: every message between you and your agent
- Your agent's memory: preferences, context, and anything it's learned about how you work
- Email and calendar data: fetched and processed locally, not stored on our servers
What goes to the cloud (briefly)
When your agent needs to think, to answer a question, write a document, or process a request, it sends a prompt through Maxiful's model proxy to a cloud AI service. This prompt is:
- Routed via our model proxy, which authenticates the request and enforces your plan's spend limits, the proxy does not store the content of the prompt
- Processed for inference by default under no-training terms, unless the workspace owner allows providers that may train, which Maxiful holds off once a Google account has been connected; the content is not stored by us
- Never used to train AI models by default (we use services with strict no-training agreements), unless the workspace owner allows providers that may train, which Maxiful holds off once a Google account has been connected
- Transmitted over encrypted connections
Apps you connect under More work apps are reached through our connections provider in the United States, which holds their sign-ins for Maxiful and keeps what each app action sent and returned for up to a year.
What Maxiful stores
On our servers, we store only what's needed to run your account:
- Your name and email address
- Your subscription and billing information
- Agent health and uptime status (anonymous technical data)
- Usage metadata from your agent's AI calls: the model name, the serving provider, the token counts, the cost and the time of each call, your plan tier, and technical fingerprints of the call, never the content. These records power your usage dashboard and let us tell whether a call could reuse the provider's cache; they are buffered on our infrastructure for at most 7 days
We do not store your conversations, files, emails, calendar events, or agent memory.
Third-party services
We use a small number of trusted third-party services to run the business: Stripe for payments, standard infrastructure providers for hosting our account management systems, and our connections provider for the apps you connect under More work apps. Apart from what each app action sends and returns, these providers do not have access to your agent's local data or conversations.