Privacy policy

Privacy Policy

Effective date: 20 October 2026 · Last updated: 20 October 2026

This Privacy Policy explains how ClaudeMax (brand name; legal entity or individual contracting seller not specified) (“ClaudeMax,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you visit our website, create an account, purchase a plan, use our API access service, or contact support.

Business address: Website: https://claudemax.tech. Physical/postal business address not provided.. Privacy contact: support@claudemax.tech. This policy should be read with the Terms and Conditions and any notices presented at the point of collection.

1. Scope and definitions

This policy covers the information processed through the ClaudeMax website, account dashboard, checkout, service infrastructure, and customer-support channels. It does not control the independent privacy practices of a third-party website or provider, though it describes when information may be shared with them to deliver the Service.

“Personal information” means information that identifies or relates to an identifiable individual, as defined by the applicable law. “Submitted content” includes prompts, code, files, messages, and other materials a Customer sends through the Service.

2. Information we may collect

2.1 Account and contact information

We may collect the name, email address, account identifier, authentication records, preferences, and other details a Customer chooses to provide. We use this information to create and administer accounts, authenticate access, communicate about orders, and provide support.

2.2 Order and payment information

We may receive order identifiers, selected plan, amount paid, currency, billing timestamps, payment status, transaction reference, and limited payment-provider metadata. Payment card and banking data may be handled directly by the selected payment provider. The operator must state the actual payment processors and whether any payment data is stored by ClaudeMax before publication.

2.3 Technical and security data

Depending on actual system configuration, we may process IP address, browser and device information, operating system, request timestamps, session identifiers, diagnostic logs, failed-login events, error reports, and security alerts. Such data may be used to secure the site, diagnose faults, prevent abuse, and maintain service reliability.

2.4 API and usage metadata

Depending on the feature and logging configuration, service records may include the selected model, request time, response status, token counts, rate-limit events, credential status, latency, and error messages. The categories of information processed and the applicable retention periods depend on the feature used, technical configuration, and operational requirements. Customers may contact support with questions about data handling.

2.5 Prompts, files, and generated responses

When you submit a prompt, code sample, file, or other content, that content may be transmitted to upstream AI providers and infrastructure vendors to fulfil the request. Depending on the actual implementation, ClaudeMax may process or retain content for delivery, support, safety, troubleshooting, or abuse prevention. This policy must be updated to state whether prompts or outputs are stored by ClaudeMax, whether support staff can access them, and how long they are retained.

Upstream providers may independently process requests under their own terms, product configuration, and retention practices. We do not claim that all providers have identical data-processing terms. Customers should avoid submitting highly sensitive information unless they have assessed the relevant provider and configuration.

3. Purposes of processing

Depending on the information and service used, we may process information to:

• Create and administer accounts and verify account access.
• Process orders and maintain transaction records.
• Route requests to supported models and deliver responses.
• Measure usage, enforce applicable limits, and troubleshoot errors.
• Respond to customer inquiries and resolve technical issues.
• Detect fraud, abuse, unauthorized access, and security incidents.
• Maintain service availability, integrity, and performance.
• Send necessary service, security, billing, and policy notices.
• Meet applicable legal, tax, accounting, and regulatory obligations.

We will process personal information for a lawful and defined purpose, using an appropriate legal basis or consent mechanism where required by applicable law.

4. AI providers and other recipients

To deliver the requested service, we may disclose relevant data to AI model providers, API providers, cloud hosting companies, infrastructure vendors, authentication tools, customer-support platforms, email delivery services, payment processors, and security or diagnostic providers.

Recipients should receive only the information reasonably needed for their role, subject to the actual technical design and applicable contractual arrangements. The operator should maintain a current list of processors and identify any provider that receives prompts, output, account identifiers, or usage metadata.

5. International processing

Some providers may process information in countries other than the country where a Customer resides. Cross-border processing will be handled in accordance with applicable legal requirements and relevant contractual safeguards. Customers who require a particular data-residency location should confirm that the requested arrangement is supported before submitting data.

6. Cookies and similar technologies

The website may use essential cookies or similar storage to maintain sessions, authenticate accounts, remember preferences, and protect against abuse. Analytics or advertising technologies must be described here if actually enabled. Where law requires consent, the site will obtain consent before deploying the relevant non-essential technologies. Customers may control cookies through browser settings, although disabling essential cookies may affect sign-in or checkout functionality.

7. Disclosure for legal, security, or business reasons

We may disclose relevant information when reasonably necessary to comply with a lawful obligation, respond to a valid legal process, investigate suspected fraud, protect individuals, enforce applicable terms, or secure our systems. In a merger, acquisition, restructuring, or transfer of business assets, information may be transferred subject to applicable law and appropriate safeguards.

8. Data retention

Information will be retained only for as long as reasonably necessary for the purposes described in this policy, taking account of account administration, service delivery, security, dispute handling, legal obligations, and legitimate recordkeeping requirements. Different categories may have different retention periods.

Before publication, the operator should insert actual retention periods or a clear retention schedule for account records, transaction records, API metadata, prompt/output logs, support tickets, security logs, and backups. Account deletion may not automatically delete information already held by independent upstream providers; requests to those providers may need to be made separately.

9. Security measures

We aim to apply safeguards appropriate to the nature of the information and the risks of processing. These may include access controls, authentication, restricted administrative permissions, credential protection, monitoring, backups, and incident-response procedures, to the extent actually implemented.

No internet transmission or storage system is completely secure. Customers should protect credentials, avoid publishing access keys, and contact us promptly if they suspect compromise.

10. Your choices and privacy rights

Depending on applicable law and the circumstances, individuals may have rights to request access to, correction of, or deletion of certain personal information, withdraw consent where processing relies on consent, or raise a complaint with the relevant authority. These rights may be subject to lawful exceptions.

Submit requests to support@claudemax.tech. We may request reasonable verification to prevent unauthorized disclosure. We will respond in accordance with the applicable legal requirements and explain where a request cannot be fulfilled, to the extent legally permitted.

11. Children

The Service is not designed to solicit personal information from children. Where applicable law requires parental consent or additional safeguards, we will follow those requirements. If you believe that a child’s information has been collected in circumstances requiring corrective action, contact support@claudemax.tech.

12. Third-party links and applications

The Service may link to third-party documentation, software, or applications. We do not control their privacy practices merely because they are linked or compatible. Review their privacy notices before providing information directly to them.

13. Privacy incident handling

We maintain an incident-handling process appropriate to the Service. If a personal-data incident occurs, we will assess it and provide any notices required by applicable law. Customers should report suspected privacy or security issues to support@claudemax.tech and avoid including passwords or complete API credentials in the report.

14. Changes to this policy

We may update this policy to reflect real changes to data handling, providers, security, or legal requirements. The revised policy will show a new “last updated” date. Where required, material changes will be notified and any required consent will be obtained.

15. Contact and complaints

Privacy contact: support@claudemax.tech
Provider: ClaudeMax (brand name; legal entity or individual contracting seller not specified)
Address: Website: https://claudemax.tech. Physical/postal business address not provided.
Grievance contact, if applicable: Chatbot (automated support), support staff; support@claudemax.tech; postal address not provided.

Please describe the request clearly and provide the minimum information needed to locate your account. Do not include passwords, full payment credentials, or unnecessary sensitive personal information.

16. Applicable law

This policy is intended to operate alongside applicable data protection, privacy, information technology, and consumer laws. Where a provision conflicts with a mandatory legal requirement, the legal requirement prevails to the extent of the conflict.