Privacy Policy

We collect information you provide and information generated when you use the Service, including:

• Account information — such as your name, email address, and profile picture, including data provided by third-party sign-in providers (such as Google) when you choose to authenticate with them.
• Content — information and materials you submit, upload, or generate while using the Service.
• Usage data — technical and analytics information, such as device and browser data, logs, and interactions.

If you connect your Tiendanube store to Max Agente, or install our app from the Tiendanube App Store, we access your store only with the permissions you authorize when you install it:

• Products (read and write) — name, description, variants, prices, images, and stock, to answer questions about your catalog. We only change the stock or price of a variant when you ask the Max assistant to do so and confirm it; the agent that serves your customers does not modify your catalog.
• Orders (read) — order number, status, payment and shipping status, total, products, and contact phone number. We use the phone number only to verify that the order belongs to the person asking about it; we do not show it to the artificial intelligence model.
• Draft orders (create and read)— when a customer confirms a purchase in the conversation, the agent creates a draft order in your store with the products, the quantities, and the customer's first name, last name, email address and, if the conversation includes it, phone number, and sends the customer the Tiendanube payment link. Max Agente does not charge or process payments: payment is completed at the Tiendanube checkout.
• Shipments (read) — status, carrier, tracking code and link, estimated dates, and pickup point.
• Pages, coupons, and locations (read) — the text of your published pages (for example, your return policy), to answer questions about your policies; the coupon a customer says they have, to confirm whether it is valid and what discount it gives, without showing other coupons; and the address of your locations and the stock at each one.
• Store information — name, email address, domain, currency, and language, to identify the store in your account.

We do not request access to your store's customer database or permission to modify your confirmed orders, your coupons, or your pages.

We do not keep a copy of your catalog or your orders: we query them in Tiendanube when needed. We store the access token to your store (encrypted), the store information listed above, the identifiers of the orders and draft orders linked to each conversation, and the history of each conversation, which includes what the agent looked up and replied in it.

If you connect your WooCommerce store to Max Agente, we access it with the REST API key you authorize in your store:

• Products and coupons (read) — name, description, variations, prices, images, and stock, to answer questions about your catalog, and the coupon a customer says they have, to confirm whether it is valid and what discount it gives.
• Orders (read) — order number, status, dates, total, products, notes to the customer, and the billing phone number and email address. We use the phone number and email address only to verify that the order belongs to the person asking about it; we do not show them to the artificial intelligence model.
• Pages (read) — the text of your published pages, to answer questions about your policies.
• Changes you ask for — the stock and prices of a product, the status of an order, and order notes, only when you ask the Max assistant to do so and confirm it.
• Webhooks — we create notifications in your store for new orders, status changes, and notes to the customer, to tell the customer in the conversation when their payment is confirmed, their order ships, or you leave them a note.

The agent sends the customer a link to your checkout with the cart ready. Max Agente does not charge or process payments: payment is completed in your store.

We do not keep a copy of your catalog or your orders: we query them in your store when needed. We store the API key (encrypted), the store's address, name, and currency, the identifiers of the orders linked to each conversation, the notifications received from your store (encrypted, until you disconnect it), and the history of each conversation, which includes what the agent looked up and replied in it.

You can disconnect your store from Integrations or delete the key in WooCommerce, under Settings, Advanced, REST API.

If you connect your Google account to Max Agente, we access it only with the permissions you grant on Google's consent screen:

• Google Sheets— only the Drive files you use with Max Agente: the spreadsheets you pick from Max Agente and the ones Max Agente creates for you. We do not see the rest of your Drive. We read those spreadsheets so your agent can answer with your prices, your stock or the status of an order, and we write in them the rows your agent records, with the date, the customer's name and phone, and the conversation reference.
• Google Calendar— the events and availability of your account's calendars, to offer free times and create, change or cancel the appointments your agent books, and your email, to identify the connected account.

We do not keep a copy of your spreadsheets or your calendars: we query them in Google when needed. What your agent looks up or records during a conversation stays in that conversation's history, like the rest of the messages, and is sent to the agent's language model to generate the reply, as explained in "Use of artificial intelligence". We also store the access token (encrypted), the name and email of the connected account and, for a few minutes, the names of your spreadsheets and their tabs, and their headers.

Max Agente's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use that data only for the features you see in Max Agente, we do not sell it, we do not use it for advertising, and we do not use it to develop, improve or train artificial intelligence models.

You can disconnect your account from Integrations or remove Max Agente's access in your Google account settings.

Max Agente replies to each merchant's customers using third-party language models. To generate each reply, we send the model the agent's instructions, the relevant part of the knowledge base, the conversation history, and the results of the actions the agent uses, such as a product's stock or an order's status. Voice messages sent by customers are transcribed with a speech recognition model so the agent can understand them.

• Each merchant chooses its agent's model from those offered by the Service. We currently work with models from OpenAI, Google, Anthropic, Moonshot AI, MiniMax, and Z.ai, and with xAI for voice message transcription. We access them through Vercel AI Gateway.
• We do not use conversations or store data to train our own models.
• Replies are generated automatically and may contain errors. The agent does not make decisions with legal effects on individuals: it looks up information, replies and, if the customer confirms, creates a draft order that the customer decides whether to pay. The merchant can review conversations, turn off the agent in any conversation, and reply in person.

We use the information we collect to:

• provide, maintain, and improve the Service;
• authenticate users and protect accounts;
• communicate with you about the Service, updates, and support;
• detect, prevent, and address technical issues, fraud, or abuse; and
• comply with legal obligations.

We do not sell your personal information. We may share it with service providers that work on our behalf—such as hosting, authentication, and analytics providers—when required by law, to protect rights and personal safety, or as part of a business transfer. These providers may only process the information necessary to deliver their services.

We retain personal information for as long as necessary to provide the Service and fulfill legitimate business purposes or legal obligations. We then take reasonable steps to delete or anonymize it.

For Tiendanube data in particular:

• If you install the app from Tiendanube and have not yet linked it to a Max Agente account, we store access to your store in encrypted form for up to 24 hours. If you do not link it within that period, or you uninstall it, we delete it.
• When you uninstall the app, we delete the store's credentials and information, the references to its orders, and the content of the conversations in which the agent used a Tiendanube action. We keep only the numeric store identifier associated with your account, to reconnect it if you reinstall the app.
• The privacy notifications we receive from Tiendanube are cleared when the store or the customer requests deletion of their data.

We use reasonable technical and organizational measures to protect your information. However, no transmission or storage method is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to restrict its processing. You can update some account details within the Service or contact us to submit a request. We will respond in accordance with applicable law.

If you are a customer of a Tiendanube store that uses Max Agente, you can ask the store for access to your data or for its deletion. When the store handles your request from Tiendanube, we receive it automatically:

• Access — we provide the store with the data we hold about you (contact details, conversations, messages, scheduled follow-ups, and linked orders) so that it can provide them to you.
• Deletion— we delete the content of your conversations with that store's agent, anonymize your contact details, cancel scheduled follow-ups, and delete the references to your orders.

We identify you by the email address or phone number included in the request and by the orders it includes.

We and our service providers use cookies and similar technologies to operate the Service, remember your preferences, and understand how it is used. You can control cookies through your browser settings, although some features may not work properly without them.

The Service is not directed to children under 13—or the minimum age required in your jurisdiction—and we do not knowingly collect personal information from children.

Your information may be processed and stored in countries other than your own, where data protection laws may differ. Where required, we take steps to provide appropriate safeguards.

We may update this Privacy Policy. If we make material changes, we will update the date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect means you accept the updated policy.

If you have questions about this Privacy Policy, email us at support@maxagente.com.