Legal
Privacy Policy
Maxwell AI Solutions (“Maxwell AI”, “we”, “us”) operates Agent M, an AI service that works inside the business software our clients already use. This policy explains, in plain English, what data Agent M touches, why, and how we protect it.
1. What data we access
Agent M only accesses data in the business applications a client explicitly connects — for example QuickBooks, Salesforce, HubSpot, Stripe, Shopify, Ramp, Excel or Google Sheets. Access is granted by the client through that application’s own authorization screen (OAuth) or through an API key the client issues to us. This can include accounting records, customers, vendors, invoices, transactions, products and similar business records held in those apps.
We also keep basic contact details for the people we work with at each client (name, work email, phone) so we can run the engagement.
2. Why we use it
We use connected data only to perform the work the client asks for: cleaning and correcting records, keeping apps in sync, reconciling accounts, and producing reports. Every job Agent M runs is logged so the client can see what was read and what was changed.
3. What we never do
- We do not sell client data, or share it with advertisers or data brokers.
- We do not use client data to train AI models — ours or anyone else’s.
- We do not access any app or account the client has not authorized.
4. Where it is stored and who can see it
Data is processed and stored on our secured servers hosted with reputable providers in the United States and the European Union. Connections are encrypted in transit, credentials and access tokens are stored encrypted, and access is limited to authorized Maxwell AI staff who need it to deliver the client’s work. We may use trusted sub-processors (for example hosting and AI model providers) strictly to run the service, under confidentiality obligations and without permission to use the data for their own purposes.
5. How long we keep it
We keep connected data only as long as needed to deliver the service. When a client disconnects an app or ends the engagement, we delete that client’s data and access tokens within 30 days of their request, except where the law requires us to keep a record.
6. Your control
Clients can revoke Agent M’s access at any time from inside the connected application’s settings — for example, in QuickBooks Online by disconnecting the app under the Apps / connected apps settings in Intuit. Revoking access stops Agent M immediately. You can also ask us to confirm what we hold, correct it, or delete it.
7. Changes
If we change this policy we will update the date above and, for material changes, tell active clients directly.
8. Contact
Questions or requests: [email protected].
See also our Terms of Service.