Privacy Policy
Last updated: 2026-10-10
What data we collect
MAXG2 collects the financial information you enter: income, expenses, assets, liabilities, household details (age, state, filing status), and projection parameters (retirement age, Social Security claiming age). We also collect your email address and display name for account identification and report delivery.
When you upload documents (tax returns, bank statements, retirement account statements), we process them to extract financial data. The original files are not stored permanently.
Third-party data processors
Your data is shared with the following processors strictly for the purposes described:
| Processor | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude API) | AI-powered analysis, Ask Max advisor, document parsing, wellness reports | Financial summary (no names sent to LLM), uploaded document content (redacted after extraction) |
| SendGrid (Twilio) | Email delivery — wellness reports, reminders | Email address, report summary (no dollar figures in email body) |
| Twilio | SMS alerts and notifications | Phone number, alert text (no financial figures) |
| Sentry | Error monitoring | Scrubbed error messages (emails, dollar amounts, Stripe IDs redacted before transmission) |
| Stripe | Subscription billing | Email address, payment method (handled entirely by Stripe; we do not store card numbers) |
| Render | Application hosting, PostgreSQL database | All application data (encrypted at rest and in transit; sslmode=require enforced) |
Data retention
| Data type | Retention | Notes |
|---|---|---|
| Financial profile data | Until you delete your account | Stored in PostgreSQL |
| Chat question text | 90 days | Automatically scrubbed; aggregate counts retained |
| Parsed documents (upload cache) | 180 days | Automatically purged |
| Wellness reports | Indefinite | Stored for historical comparison |
| LLM cost logs | Indefinite | Used for usage tracking; no question content |
| Shared report links | 7 days | Auto-expire |
What we do NOT do
- We do not sell your data to third parties.
- We do not use your data for advertising.
- We do not share your data with other users.
- We do not store your uploaded documents permanently.
- We do not send your name to AI processors (generic labels are used).
- We do not include dollar figures in email notifications.
Security measures
- All database connections use TLS (sslmode=require).
- Uploaded documents are processed for data extraction only; sensitive identifiers (SSN, account numbers) are redacted after extraction.
- Error monitoring (Sentry) scrubs emails, dollar amounts, and payment IDs before transmission.
- Admin alerts scrub PII from exception text.
- Financial amounts in application logs are at DEBUG level only (not captured by production log aggregators at default settings).
- Chat question text is automatically scrubbed after 90 days.
Your rights
Export your data
Your complete financial profile is available for export from the Settings page as a JSON file at any time.
Delete your account
You can delete your account from the Settings page. This permanently removes all stored financial data, chat history, and wellness reports. Stripe subscription data is cancelled and customer records are deleted. Aggregate, anonymized usage counts (e.g., “5 analyses run”) may be retained for service metrics.
Correct your data
All financial data is editable through the wizard interface at any time.
Changes to this policy
We will update this policy when our data practices change. The “Last updated” date at the top reflects the most recent revision.
Contact
For privacy questions, contact the account administrator through the application’s settings page.