Privacy Policy
Last updated: May 18, 2026
1. Data We Collect
We collect the following categories of data:
- Account data: email address, name (if provided), and authentication identifiers from OAuth providers (Google, Apple, GitHub) when you sign in through them.
- Billing data: payment method tokens, billing address, and transaction history. Card details are handled by our payment processor (Stripe) and never reach MaxGravity servers in raw form.
- Usage data: prompts and parameters you submit, model responses, latency, token counts, and cost per request — used to bill, debug, and improve the Service.
- Technical data: IP address, user agent, device type, and approximate location, collected to secure the Service and prevent abuse.
2. How We Use Data
We use your data to:
- Provide, maintain, and improve MaxGravity.
- Authenticate you and protect your account.
- Bill you accurately and prevent fraudulent transactions.
- Route your requests to upstream AI providers.
- Investigate abuse, security incidents, and Terms violations.
- Communicate with you about your account, updates, and support.
We do not sell your data, and we do not use the content of your prompts or responses to train our own models.
3. Third-Party Services
MaxGravity is a gateway to AI models hosted by other providers. When you call a model, your prompt and any attached data are forwarded to the relevant provider so they can generate a response. The providers we currently route to include:
- OpenAI
- Anthropic
- Google (Gemini, Imagen, Veo)
- Mistral
- Meta (via hosted Llama endpoints)
- Stability AI
- ElevenLabs
- Runway
- DeepSeek
Each provider processes your data under its own privacy policy and data-retention rules. We also use Supabase for authentication and storage, Stripe for billing, and a small number of operational vendors (analytics, error monitoring, transactional email). A current list is available on request.
4. Data Retention
We retain account and billing records for as long as your account is active and for up to seven years after closure to satisfy tax and accounting obligations. Usage logs (request metadata, token counts) are kept for up to 24 months for billing audits and abuse investigation. Raw prompt and response content is retained for up to 30 days for debugging and then deleted, unless a longer period is required by law or to investigate a specific incident.
You may request earlier deletion at any time; some records (e.g. tax invoices) are retained even after account closure when the law requires it.
5. Your Rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete the personal data we hold about you, and to object to certain processing. To exercise these rights, email support@maxgravity.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
6. Cookies
We use a small number of cookies and similar local-storage entries to keep you signed in, remember your preferences, and measure aggregate Service usage. Strictly-necessary cookies (session, CSRF) are always on. Analytics cookies can be disabled in your browser settings; doing so does not affect access to the Service.
7. Contact
Questions about this policy or your data? Email support@maxgravity.io.
