Privacy
The short version
Maxy runs on infrastructure you control — a Pi on your premises, a Linux machine you already own, or a cloud VM in your own cloud account. Your data stays on that host. We don’t collect it, store it, or have access to it.
What stays on your host vs. what leaves
| Stays on your host | Sent to Anthropic |
|---|---|
| Conversations and messages Customer and contact records Knowledge graph and memory Documents and files Workflow definitions and history Agent tool call audit trail | Prompts and responses only — the text exchanged between Maxy and Claude during a conversation turn. Subject to Anthropic’s privacy policy. |
No other data leaves your host. There is no third-party cloud storage, no analytics collection from your host, and no telemetry.
getmaxy.com conversations
When you chat with Maxy on this website, your conversation is processed by Claude (Anthropic’s AI) to generate responses. Conversation content is stored on our servers to improve Maxy and provide continuity. Do not share sensitive personal information in these conversations.
Inbound message screening
Every message sent to your Maxy host — from any channel (web chat, WhatsApp, Telegram, email) — passes through an inbound screening step before reaching the agent. This screening detects prompt injection patterns and flags safety concerns. Messages classified as unsafe on public channels are refused without reaching the agent. Admin messages receive advisory screening only — flagged but never blocked.
Agent action audit trail
Every tool invocation by the admin agent is recorded as a durable audit record in the local knowledge graph. These records include the tool name, input, output, timestamp, and the conversation that triggered the action. They persist indefinitely and are queryable in conversation — ask Maxy “what tools ran in the last session?” to review.
GDPR compliance
Maxy supports GDPR data subject rights through conversation. No support tickets, no dashboards, no waiting.
Right of access (Article 15): Ask Maxy to export all data held on a contact. The export gathers the person record, access credentials, conversation history, and emails into a single structured document that can be handed directly to the data subject.
Right to erasure (Article 17): Ask Maxy to delete all data held on a contact. Maxy shows a preview of what would be removed, confirms with you, then performs a full cascade deletion across all data stores. A deletion receipt is returned listing exactly what was removed.
Example: “Export all data we hold on john@example.com” or “Delete all data on Sarah Chen.”
What we collect
From the marketing sites (getmaxy.com and maxy.bot), we may collect standard web analytics: page visits, referral source, and device type. No cookies are used for tracking. No personal data is sold or shared with third parties.
Contact
Questions about privacy? Message us on WhatsApp: +44 7828 261578.
Last updated: April 2026