Max
Privacy policy – Max
This policy applies only to Max and its connection to Gmail.
Controller
Fredes Studio, Lucerne (Switzerland). Contact details in the imprint.
Access to Google data
Max accesses a Gmail account only after explicit consent in the Google dialog, and only with the "gmail.readonly" permission (read only). Max cannot send, delete, archive or modify email.
Data processed
Max searches for emails about invoices, payment reminders, taxes, insurance, contracts and payslips. For matching emails it stores: sender, subject, date, a short preview (at most 200 characters), the internal Gmail message ID and the address of the connected account. Attachment contents are not read.
Use
The data is used only to show the account holder suggestions for manual review. It is not used for advertising, profiling or training AI models.
Storage and security
The data is stored in a private, encrypted-backup environment that is not publicly reachable. Google access keys are kept in the operating system's encrypted credential store.
Transfers
Gmail data is not sold and not shared with third parties, including AI services. This information page and its hosting provider do not receive any Gmail data.
Retention and deletion
Stored details are kept until the account holder deletes them. When an account is disconnected, Max deletes its access key. On request via the contact details in the imprint, the details stored for an account are deleted.
Revoking access
Access can be revoked at any time at myaccount.google.com/permissions. After that, Max can no longer access the account.
Google API Services User Data Policy
Max's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.