Privacy Policy

The Maximo Guys LLC ("Company," "we," "us," or "our") operates the website at themaximoguys.ai (the "Website"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit and interact with our Website.

We are committed to protecting your privacy and handling your personal information with transparency and care. Please read this Privacy Policy carefully. By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

Account Registration. When you create an account, we collect:

• Full name
• Email address
• Password (stored in encrypted form)
• Authentication provider information (if signing in via Google or GitHub)

Contact Form Submissions. When you submit our contact form, we collect:

• Name
• Email address
• Company name (optional)
• Industry (optional)
• Message content

Newsletter Subscription. When you subscribe to our newsletter, we collect your email address.

Correspondence. When you contact us directly by email or other means, we collect the content of your communication and any information you voluntarily provide.

1.2 Information Collected Automatically

When you visit the Website, we may automatically collect certain information, including:

• Device and Browser Information: Device type, operating system, browser type and version, screen resolution, and language preferences
• Usage Data: Pages visited, time spent on pages, links clicked, referring URL, and navigation patterns
• Network Information: IP address, approximate geographic location (city/region level), and internet service provider
• Log Data: Server logs that record your interactions with the Website, including access times, error logs, and request details

1.3 Information from Third-Party Authentication Providers

If you choose to sign in using Google or GitHub, we receive limited information from these providers, which may include:

• Name
• Email address
• Profile picture URL
• Account identifier

We do not receive your passwords from these third-party providers. The information we receive is governed by the privacy settings you have configured with the respective provider.

1.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on our Website. For more details, see Section 11 (Cookie Policy) below.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Operating the Website: To deliver the Website's content and features, maintain user accounts, and enable access to personalized portal resources
• Responding to Inquiries: To process and respond to contact form submissions and consultation requests
• Communications: To send newsletters (if you have subscribed), respond to your inquiries, and provide information you have requested
• Analytics and Improvement: To understand how visitors use our Website, identify trends, and improve the Website's content, functionality, and user experience
• Security: To detect, prevent, and address fraud, unauthorized access, and other security issues
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
• Business Operations: To manage our internal business operations, including lead management and customer relationship tracking

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Legal Bases for Processing

Depending on your location and the applicable law, we process your personal information based on one or more of the following legal bases:

• Consent: Where you have given us explicit consent to process your data (e.g., newsletter subscription)
• Contractual Necessity: Where processing is necessary to fulfill our obligations under a contract or to take steps at your request prior to entering a contract
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our Website and services, provided these interests do not override your fundamental rights
• Legal Obligation: Where processing is necessary to comply with a legal obligation

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

4.1 Service Providers

We use third-party service providers to help us operate and improve the Website. These providers have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect it. Our current service providers include:

• Supabase: Database hosting, user authentication, and data storage. Supabase processes account data, contact form submissions, and session information.
• Vercel: Website hosting and content delivery. Vercel may process IP addresses and usage data through server logs.
• Resend: Email delivery. Resend processes your email address and message content to send newsletters, welcome emails, and responses to your inquiries.
• OpenAI: Automated content moderation. Comments you submit on the Website are sent to OpenAI's moderation service to detect spam, abuse, and harmful content before publication. Under OpenAI's API terms, this data is not used to train OpenAI's models.
• Analytics Providers: We may use analytics services to understand Website usage patterns. These providers collect anonymized or pseudonymized usage data.

4.2 Third-Party Authentication

If you sign in using Google or GitHub, those providers will have access to certain information as described in their respective privacy policies.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).

4.4 Business Transfers

If the Company is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for as long as your account is active. If you request account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.
• Contact Form Submissions: Retained for up to 24 months from the date of submission to manage lead follow-up and business inquiries.
• Newsletter Subscriptions: Retained until you unsubscribe. Upon unsubscription, your email will be removed from our mailing list within 10 business days.
• Usage and Analytics Data: Retained in anonymized or aggregated form for up to 24 months.
• Server Logs: Retained for up to 90 days for security and troubleshooting purposes.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We honor the following rights for all users, regardless of location:

6.1 General Rights

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Opt-Out of Communications: You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us at hello@themaximoguys.ai.

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at hello@themaximoguys.ai. We will respond to your request within 45 days. We may ask you to verify your identity before processing your request to protect your privacy and security.

You will not be discriminated against for exercising any of your privacy rights.

7. US State Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with specific rights regarding your personal information:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information, nor do we share it for cross-context behavioral advertising purposes. If this practice changes, we will update this Privacy Policy and provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Categories of Personal Information Collected (preceding 12 months):

To exercise your California privacy rights, contact us at hello@themaximoguys.ai or submit a request through our contact form.

7.2 Virginia Residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act ("VCDPA") provides you with specific rights:

• Right to confirm whether we are processing your personal data and to access that data
• Right to correct inaccuracies in your personal data
• Right to delete your personal data
• Right to obtain a copy of your personal data in a portable format
• Right to opt out of processing for targeted advertising, sale of personal data, or profiling with legally significant effects

We do not sell personal data or process it for targeted advertising or profiling. To exercise your rights, contact us at hello@themaximoguys.ai. If we decline your request, you have the right to appeal by contacting us, and we will respond within 60 days.

7.3 Colorado Residents (CPA)

If you are a Colorado resident, the Colorado Privacy Act ("CPA") provides you with the right to confirm and access your personal data, correct inaccuracies, delete your personal data, obtain data portability, and opt out of processing for targeted advertising, sale of personal data, or profiling.

To exercise your rights, contact us at hello@themaximoguys.ai. You may appeal a denial within a reasonable period, and we will respond within 45 days of receiving your appeal.

7.4 Connecticut Residents (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act ("CTDPA") provides you with rights similar to those above, including the right to confirm, access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of the sale of your personal data, targeted advertising, and profiling.

To exercise your rights, contact us at hello@themaximoguys.ai. You may appeal a denial, and we will respond to your appeal within 60 days.

7.5 Utah Residents (UCPA)

If you are a Utah resident, the Utah Consumer Privacy Act ("UCPA") provides you with the right to confirm and access your personal data, delete your personal data, and obtain a copy in a portable format. You also have the right to opt out of the sale of your personal data and targeted advertising.

To exercise your rights, contact us at hello@themaximoguys.ai.

7.6 Other US State Privacy Laws

We are committed to complying with all applicable US state privacy laws, including those that have taken effect or will take effect in 2025 and 2026 (such as the Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, and Rhode Island Data Transparency and Privacy Protection Act, among others). If you are a resident of a state with a comprehensive privacy law, you may exercise your rights by contacting us at hello@themaximoguys.ai.

8. Children's Privacy and Minimum Age

The Website is a business-to-business service intended for professionals. It is not directed to children, and user accounts are available only to individuals aged 18 or older, as set out in our Terms of Service. We ask every user to confirm they are at least 18 before an account can be created or used, and we do not knowingly collect personal information through accounts from anyone under 18.

Children under 13 (COPPA). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly in compliance with the Children's Online Privacy Protection Act ("COPPA").

Minors under 18 (California and other states). Because we do not knowingly allow minors to hold accounts, we do not knowingly sell or share the personal information of consumers under 16 as described in the CCPA/CPRA, and we do not use the personal information of known minors for targeted advertising or profiling as restricted by other state laws. California residents under 18 who may have posted content on the Website (such as a comment or profile information) may request its removal under California Business and Professions Code § 22581 by contacting us; removal may not ensure complete or comprehensive removal of content that others have copied or reposted.

Reporting a minor. If you are a parent or guardian and believe that a person under 18 has created an account or provided us with personal information, please contact us at hello@themaximoguys.ai. We will suspend the account and delete the associated personal information, except where retention is required by law.

9. Security Measures

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: Data transmitted between your browser and our servers is encrypted using TLS/SSL protocols. Passwords are hashed and salted before storage.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions. We use role-based access controls in our systems.
• Authentication Security: We support secure authentication mechanisms including multi-factor authentication through third-party providers (Google, GitHub).
• Infrastructure Security: Our data is hosted on Supabase and Vercel, both of which maintain SOC 2 compliance and implement industry-standard security practices.
• Monitoring: We monitor our systems for potential security threats and maintain audit logs of administrative actions.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information.

10. International Data Considerations

Our Website is operated in the United States. If you are accessing the Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using the Website, you consent to the transfer of your information to the United States and the processing of your information as described in this Privacy Policy.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or other regions with data protection laws that provide rights beyond those described here, please contact us at hello@themaximoguys.ai to discuss your specific rights and how we can accommodate them.

11. Cookie Policy

11.1 What Are Cookies

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators.

11.2 Cookies We Use

Strictly Necessary Cookies. These cookies are essential for the Website to function properly. They include cookies that enable you to log in to your account, maintain your session, and use secure areas of the Website. You cannot opt out of these cookies.

Analytics and Advertising Cookies (opt-in only). With your consent, we may use analytics and advertising tags provided by Google (Google Analytics), LinkedIn (Insight Tag), and X (website tag) to understand how visitors use the Website and measure our marketing. These tags are not loaded and do not collect any information unless you click "Accept" in our cookie banner. You can withdraw consent at any time using the "Cookie Settings" link in the Website footer. We also use Vercel Web Analytics, a privacy-friendly service that does not use cookies and does not store IP addresses, to measure aggregate page views and site performance.

Functional Cookies. These cookies enable the Website to provide enhanced functionality and personalization, such as remembering your preferences and settings.

11.3 No Session Recording or Interception of Communications

We do not use session replay, screen recording, keystroke logging, or similar technologies that record your mouse movements, clicks, scrolling, or what you type on the Website. We do not allow any third party to intercept, read, or record the contents of your communications with us, including information you enter in our contact, signup, newsletter, or comment forms. Form submissions are sent only to our own servers and the service providers that host them on our behalf (see Section 4).

11.4 Fonts

All fonts used on the Website are hosted on our own servers. Your browser does not contact Google Fonts or any other third-party font service when you visit the Website, so your IP address is not transmitted to Google for font delivery.

11.5 Third-Party Cookies

Third-party services we use may set their own cookies. These are governed by the privacy policies of those third parties. We do not control or have access to third-party cookies.

11.6 Managing Cookies

Most web browsers allow you to manage cookies through their settings. You can typically:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies from being set
• Delete all cookies when you close your browser

Please note that blocking or deleting cookies may affect the functionality of the Website, including your ability to log in to your account.

12. Global Privacy Control and Do Not Track

We honor the Global Privacy Control ("GPC") signal. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising, as required by the CCPA/CPRA and other applicable state laws: our third-party analytics and advertising tags will not load, and the cookie banner will not be shown. There is no uniform standard for the older "Do Not Track" (DNT) signal, so we do not respond to DNT separately; please use GPC instead.

13. Third-Party Links

The Website may contain links to third-party websites, services, or resources. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on the Website for a reasonable period
• If required by applicable law, notify you by email

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Website after the posting of changes constitutes your acceptance of those changes.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

The Maximo Guys LLC
Email: hello@themaximoguys.ai
Location: 3480 Preston Ridge Rd Ste 500, Alpharetta, GA 30005
Website: themaximoguys.ai

For privacy-specific inquiries, please include "Privacy Request" in your subject line so we can route your request appropriately.

We will respond to all privacy-related inquiries within 45 days of receipt, or sooner as required by applicable law.