- le siège social (MAXX_OPERATOR_ADDRESS)
Privacy
This page says what the service knows about you, why, who it shares it with and how long it keeps it. It is written to be read.
Data controller
Maxx AI. Any question or request: [email protected].
Where your data lives
This distinction matters more than anything else on this page. Your CV, your profile and the documents you upload stay on your computer: the software that fills in the forms runs on your machine, and the hosted service does not store them. The hosted service holds your email address, the status of your access, the emails received at the MAXX address you give employers, and technical logs.
What is processed, and why
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address | Signing you in, writing to you | Performance of the contract | Until the account is deleted |
| Purchase, plan, expiry, invoice | Giving you the access you paid for, keeping the books | Contract, then legal obligation | Invoices: 10 years |
| Emails received at your MAXX address | Extracting an employer's verification link and forwarding the rest to you | Performance of the contract | 30 days |
| Unresolved form questions | Asking you, and pooling them anonymously so the next person is not blocked | Legitimate interest | Anonymised immediately |
| Text sent to the language model | Understanding a form question and suggesting an answer | Performance of the contract | Not kept by us |
| CV uploaded for the trial, before any sign-up | Showing you what the service reads in your CV and what it would answer on the form, before you decide anything | Pre-contractual steps, at your request | Not kept: read then erased within the second, never written to disk beyond the time of the reply. No application is sent. |
| Technical logs, IP address | Security, diagnostics | Legitimate interest | 12 months |
| Date of acceptance of the terms and version accepted | Proving you were able to read this text and the terms of sale before opening your account | Legal obligation | 5 years after the account ends |
| Log of who looked at your file | Knowing who, on our side, opened your file and for what reason | Legal obligation | 3 years, unlinked from you after deletion |
The service never sends the language model information in protected categories — origin, health, disability, family situation, opinions, union membership. Questions on those subjects are asked to you, and your answers never leave your computer.
Who it is shared with
- Stripe Payments Europe, to take payment and invoice. Stripe, not us, sees your card number.
- Our email sending and receiving provider, to write to you and receive the messages sent to your MAXX address.
- Our language-model provider, for the text of form questions only and what is needed to answer them. This provider may be established in the United States; the transfer is governed by the European Commission's standard contractual clauses.
- Our hosting provider, which runs the servers.
- The employers you apply to, who receive what you decided to send them. You trigger every submission yourself.
Nothing is sold, rented or handed over for advertising purposes.
Who on our side can see your file
To answer your messages, we may open a record containing your address, your plan, your payments, the status of your linked computer and the result of your last submission attempt. It contains neither your CV, nor your career history, nor your answers to questions, nor your passwords: those never leave your computer, and we have no way of viewing them, even if you asked us to.
Every time a file is opened, it is logged with the date, the person who opened it and the reason given. That log is part of the copy of your data you can download at any time: you can check for yourself that we only looked when there was a reason to.
Your rights
You may access your data, correct it, erase it, obtain a portable copy, object to processing based on legitimate interest, and restrict its use. Two of these rights are one click away on the Account page: download all my data and delete my account. Deletion is immediate and final, except for invoices that accounting law requires us to keep. For anything else, write to [email protected]; a reply is due within one month.
You may lodge a complaint at any time with the CNIL, 3 place de Fontenoy, 75007 Paris — cnil.fr.
Cookies
The site sets four first-party cookies, strictly necessary or exempt from consent. None can be read by the page's code, none is sent to a third party.
maxx_session keeps you signed in for thirty days. You delete it by
signing out. maxx_essai only remembers that the free trial has been used,
for ninety days; it contains nothing but a marker, does not say who you are, and only
serves to not offer the same thing twice. maxx_demande lives fifteen
minutes: it lets the tab where you typed your address open by itself when you click the
sign-in link from your phone. maxx_visiteur is a random number kept for
ninety days that links your sign-up to the page you arrived through (an ad, for
instance); it contains nothing about you and is compared to nothing but our own pages.
You delete them from your browser settings.
Ad measurement, only with your consent. When we run ads (Meta: Instagram,
Facebook), a banner offers you, once, to accept a measurement cookie. If you accept,
the Meta pixel is loaded and sets _fbp (and _fbc if you came
from an ad) for three months; we use it only to know which ads bring sign-ups and
purchases, so as to stop the others. Meta is then joint controller of that processing
(its
policy). If you decline, or do not answer, nothing is loaded and nothing is set: we
then only count events without identifiers, from our server. Your answer is remembered
in your browser; to change your mind, clear this site's data in its settings and you
will be asked again.
Security
Exchanges are encrypted in transit. The passwords of the accounts the software creates with employers are kept in your operating system's keychain, on your machine, and are never sent to the service.