Privacy Policy

Last updated: October 3, 2026

Our promise in plain language. We collect what Maxx needs to work for you, use it to operate your agent, and do not sell your personal information. Your account data is isolated from other customers. Passwords belong only in the secure vault — never in chat. You can disconnect services, request a copy of your data, or request deletion.

1. Who is responsible for your information

This Privacy Policy describes how Energy Engine AI, Inc. d/b/a Energy Maxx AI (“Energy Maxx AI”, “we”, “us”, or “our”) collects, uses, discloses, and protects information when you visit energymaxx-ai.com, use the Energy Maxx AI portal, or use Maxx by iMessage, SMS, WhatsApp, phone, email, or another channel we support.

2. Changes to this policy

We may update this policy and will change the date above. For material changes to how we use or disclose information, we will use reasonable efforts to notify you by email, portal, message, or another appropriate method and will take additional steps required by law.

3. Information you provide directly

Account and contact details: name, phone number, email address, business name, role, and account preferences. We use these to create and secure your account, activate your line, communicate with you, and provide support.
Business profile: products and services, service areas, prices or offers you supply, ideal-customer information, goals, calendars, scripts, brand material, and instructions. We use these so Maxx can act in context.
Messages and instructions: texts, calls, emails, files, and other material you send to Maxx or ask Maxx to create, send, organize, or analyze.
Payment information: our payment processors collect and process card and billing information. We receive payment status, limited card or transaction identifiers, receipts, and amounts; we do not ask you to send full card numbers to Maxx.
Support and Resolution Center information: details you include in a support, billing, cancellation, or dispute request, so we can investigate and respond.

Providing some information is optional, but Maxx may not be able to perform a requested task without information or access needed for that task.

4. Information from connected services

When you connect a third-party account, we access only the scopes shown in that connection flow and needed for the work you direct. Depending on the services and permissions, this may include profile details, email, calendar, contacts, files, CRM records, meetings, social accounts, advertising accounts, and related content and metadata.

Connector access is provided through tap-to-connect authorization where available, including through our connector providers. You can disconnect a service in the portal or in the third-party service. Disconnecting stops future access through that connection; you may also request deletion of indexed connected-service data as described in Section 11.

Google Workspace and Google user data

If you connect Google services, we may access Gmail, Calendar, Drive, and related Google data within the permissions you grant. We use Google user data only to provide and improve user-facing Energy Maxx AI features you request, such as reading or sending email and managing calendar events.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google Workspace data to train, fine-tune, or improve generalized AI models, and we do not use it for advertising, retargeting, or sale. We do not disclose raw or derived Google Workspace data to third-party AI services for model training or unrelated secondary purposes. Human access to Google user data is limited to circumstances such as providing support at your request, security investigation, legal compliance, or where you have given consent.

5. Information about contacts and leads

You may ask Maxx to work with customers, prospects, employees, applicants, vendors, or other contacts. In that case, we process their names, contact details, conversation history, appointment and CRM status, and other information you provide, import, connect, or direct us to obtain from a data provider for a requested lead or outreach task.

We process this information on your behalf to operate your agent. You are responsible for having a lawful basis to provide it to us and to direct the requested communication. If you received this policy because Maxx contacted you for a customer, reply STOP to opt out of texts or contact us at support@energymaxx-ai.com to ask about or request correction or deletion of information, subject to our customer’s and our legal obligations.

6. Calls, messages, files, and credentials

Communications: message content, call audio where calls are made or received through the service, voicemail, transcripts, summaries, and delivery records, used to carry out tasks, maintain continuity, show activity, resolve disputes, and improve reliability.
Files: documents, images, and other files you upload or ask Maxx to retrieve or create. Uploads are checked for allowed type and size and are stored under your account.
Credential Vault material: usernames, passwords, recovery information, or other credentials you deliberately place in the secure vault. Vault material is used only to provide the service to you and is not used to train AI models. Never paste credentials into ordinary chat.

7. Information collected automatically

Usage and activity logs: pages and features used, actions taken, approvals, quotes, debits, timestamps, task status, and errors. These records let you see what Maxx did and help us investigate and secure the service.
Device and network information: IP address, browser and device type, operating system, time zone, and similar technical information.
Cookies: we use essential cookies needed to sign you in, maintain a portal or console session, remember security choices, and operate the website. We do not currently use advertising cookies on the legal pages. You can block cookies in your browser, but sign-in and some features may not work. Our website is not currently designed to respond to browser “Do Not Track” signals.

8. Information from other sources

We may receive information from payment processors, telecom and connector providers, identity or fraud-prevention services, data providers you ask us to use for lead or business information, and publicly available business sources. We combine this information only as needed to activate and operate your agent, complete a requested task, price or prevent misuse of the service, or comply with law.

9. How we use information

We use information to:

create, activate, operate, and support your Maxx agent and dedicated line;
understand requests, plan and complete tasks, communicate, and take Actions you authorize;
connect to and interact with services on your behalf;
quote, debit, top up, refund where approved, and maintain wallet and payment records;
show you activity, approvals, receipts, and account history;
protect accounts, prevent fraud and abuse, enforce spending limits and opt-outs, and investigate incidents;
troubleshoot, measure reliability, and develop and improve Energy Maxx AI; and
comply with legal obligations and protect our rights and the rights of others.

AI model training and your choice

Except for Vault material and Google Workspace data, we may use account material in de-identified, aggregated, or otherwise protected form to evaluate and improve Energy Maxx AI. Where we use identifiable material to evaluate, fine-tune, or train models that power Energy Maxx AI, you may opt out by emailing support@energymaxx-ai.com. The opt-out applies going forward, does not require us to retrain a model already trained before the opt-out, and does not prevent safety, security, fraud, or legal-compliance review. An opt-out may limit personalization or improvement for your specific use case.

Maxx is an AI system, not a professional adviser. Do not rely on it as a substitute for legal, financial, medical, or other professional advice.

10. When we disclose information

We do not sell personal information and do not disclose it to data brokers for resale. We may disclose information to:

Service providers that host, operate, secure, analyze, or support Energy Maxx AI, under instructions appropriate to their role;
Payment, telecom, AI-model, connector, communications, and data providers needed to perform a task or operate the service;
Third parties you direct Maxx to contact or interact with, including customers, prospects, booking platforms, CRMs, and connected services;
Professional advisers and authorities, where needed for accounting, legal, security, compliance, or enforcement purposes;
A buyer or successor in a merger, acquisition, financing, or sale of assets, subject to appropriate protections; and
Others with your direction or consent.

We may disclose information where required by law, to respond to lawful requests, to detect or prevent fraud or security incidents, to protect people or property, or to establish, exercise, or defend legal claims. Third-party business reporting, if any, is provided in aggregate or de-identified form and does not include Google Workspace data for a partner’s own purposes.

11. Retention, your choices, and your rights

We retain information while your account is active and for as long as reasonably needed to provide continuity, maintain transaction and Action records, resolve disputes, prevent fraud, enforce agreements, and meet legal obligations. Backup copies may persist for a limited period after deletion from active systems.

Depending on where you live, you may have rights to request access, correction, a copy, deletion, restriction, or objection, and to opt out of sale or certain sharing. We do not sell personal information. To make a request, email support@energymaxx-ai.com. We may need to verify your identity and may deny or limit a request where an exemption applies. We will not discriminate against you for exercising a privacy right.

On cancellation, we present a data choice: you may permit us to keep your data in de-identified or otherwise protected form to improve the technology, or unselect that option to request deletion. We honor the choice subject to legal, payment, security, and fraud-prevention retention duties.

You can disconnect a connected service in the portal or through the provider. Disconnecting does not automatically delete data already indexed; request deletion by email or through your account process.

12. Data security

No system can guarantee perfect security, but we apply safeguards designed for an agent that acts on your behalf, including:

Per-customer isolation: account, conversation, file, wallet, and credential records are keyed and accessed by customer account, and the agent sandbox is designed not to access another customer’s wallet, vault, files, or messaging;
Access controls: session authentication, secure cookies, provider signature checks, and least-privilege internal processes;
Verified payment events: payment webhooks are cryptographically signature-verified and fail closed before an account is settled or credited based on them;
Input and upload protections: user content is escaped or sanitized for display where appropriate; uploads are validated for type and size, executable and active-content types are rejected, and stored files are served with protections against content-type sniffing and execution in our pages;
Credential protections: connector tokens and Vault material are protected in storage, are not requested in ordinary chat, and access and use are logged for your account.

AI agents can make unintended communications or purchases if given incorrect information or manipulated by malicious third-party content. Review approvals, budgets, spending limits, Action records, and connected-service permissions. Tell us promptly about suspected unauthorized activity. If a confirmed incident requires notice, we will notify affected people and regulators as required by applicable law and without unreasonable delay.

Do not send sensitive information through an insecure channel. If you choose to place health, financial, or other sensitive information in a task, Maxx will process it only as directed to perform that task.

13. De-identified information

We may create and use de-identified or aggregated information that cannot reasonably identify you for analytics, research, safety, and service improvement. We will not attempt to re-identify it except to test whether our de-identification works or where law permits.

14. Third-party links and services

Energy Maxx AI may link to or interact with services we do not control. Their privacy practices are governed by their own policies. We are not responsible for third-party websites, connected services, or providers except as required by law.

15. Children

Energy Maxx AI is for adults 18 and older and is not directed to children. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 provided information, contact us and we will make reasonable efforts to delete it.

16. Accessibility and contact

We aim for web pages that work with a keyboard, use clear labels, sufficient color contrast, and alternative text for meaningful images. If you encounter an accessibility or privacy barrier, contact us and we will work to provide the information in another way.

Privacy questions or requests: support@energymaxx-ai.com.