Privacy Policy

Information We Collect

When you interact with Maxim, we may collect the following information:

• Phone number — When you send or receive SMS/MMS messages through our Twilio-powered messaging service.
• Message content — The text of messages you send to and receive from Maxim, used to process your requests and maintain conversation context.
• Conversation metadata — Timestamps, message direction (inbound/outbound), and conversation threading identifiers.
• Usage data — Interaction patterns used by Maxim's internal learning systems (NAc reward attribution) to improve response quality.

SMS/MMS Messaging

Maxim uses Twilio to send and receive SMS and MMS messages. By texting Maxim, you consent to receive automated responses. Key details:

How We Use Your Information

Information collected is used for the following purposes:

• Processing requests — Your messages are processed through Maxim's agentic pipeline to understand intent and generate responses.
• Conversation continuity — Message history is maintained for the duration of a conversation session (30-minute inactivity timeout) to provide contextual responses.
• Internal learning — Interaction patterns are used by Maxim's reward learning systems to improve future responses. This is local, on-device learning—not shared externally.
• Memory systems — Salient interactions may be stored in Maxim's episodic memory for future reference, following the same memory lifecycle as all other perceptual inputs.

Data Sharing

Data Security

We take security seriously. Measures include:

• Webhook verification — All inbound Twilio webhooks are validated using HMAC signature verification to prevent spoofing.
• Local binding — The API server binds to localhost only. External access requires an encrypted tunnel (ngrok or Cloudflare Tunnel).
• Token authentication — Control endpoints are protected by bearer token authentication.
• Fixed trust boundaries — External message content never controls internal system fields like salience or override commands.

Data Retention

Conversation sessions expire after 30 minutes of inactivity. Expired conversations are archived as summaries in Maxim's memory systems and the original message content is not retained in full. Memory items are subject to natural decay over time as part of Maxim's biologically-inspired memory lifecycle.

Your Rights

You have the right to:

• Opt out of SMS messaging at any time by texting STOP
• Request information about the data we hold about you
• Request deletion of your data

Children's Privacy

Maxim is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact