SmaxAI Privacy Policy

To provide the multi-model intelligence workspace, SmaxAI processes: (a) Account Identifiers: your email address, display name, user avatar preference, and authentication tokens managed via Firebase Authentication; (b) Workspace Conversations: prompts, responses, conversation titles, attachments (code files, documents, images for visual analysis), and user feedback signals; (c) Compute & Routing Telemetry: credit balances, selected model configurations (Auto, Pragg Air, Pragg Max, DeepSeek R1, Grok 3, GPT-4o, etc.), and latency metrics; (d) Technical & Diagnostic Data: IP address, user agent, session timestamps, and crash telemetry strictly for service stability and abuse prevention.

Some sign-in methods may request additional account details, such as a phone number. Authentication is handled by our configured identity provider. Do not submit passwords, private API keys, or other credentials in chat prompts.

SmaxAI routes requests to configured AI providers. To fulfil a request, relevant prompt text, conversation context, and attachments may be sent to the provider serving that model or feature over the connection configured for the service.

Provider terms and data handling depend on the selected model, provider, feature, and configuration in effect at the time. We aim to use API or business settings that restrict training where those controls are available, but we cannot promise universal zero-data retention or a universal no-training outcome across every route. Providers may retain data for service delivery, abuse monitoring, or other purposes described in their terms.

Provider practices can differ and may change. SmaxAI does not sell personal information for money; relevant data may be processed by AI and infrastructure providers to deliver the service. See the provider's applicable terms for details.

Incognito Chat is intended to keep the conversation out of saved chat history in your SmaxAI account. It should not be treated as end-to-end encryption or a guarantee that providers, network infrastructure, browser extensions, or operational logs do not process or retain related data. Closing the session clears the conversation from the active client view; provider-side handling remains subject to the provider's terms.

Account profiles and persistent user chats are stored within Google Cloud Firestore and protected by strict database security rules ensuring that users can only read and write their own documents.

The service uses HTTPS/TLS for connections where supported by the configured infrastructure. Security controls vary by provider and integration. Encryption in transit is not end-to-end encryption, and we do not promise that SmaxAI systems are technically unable to access content needed to provide the service. Provider credentials are intended to remain server-side, but no online service can guarantee absolute security.

SmaxAI uses essential cookies and local storage tokens to preserve your login session, active theme preference (dark/light), and model selector settings. The platform integrates Google AdSense and Google Translate scripts for monetization and accessibility; these third-party services may place cookies or device identifiers in accordance with Google's Advertising Privacy Principles. Users may opt out of personalized advertising through Google Ads Settings or browser-level tracking protection.

We believe your data belongs to you. You maintain complete control over your content:

• Account deletion: use the account deletion controls in Settings when available, or contact info@smaxai.in for assistance. Deletion may remove active account records, but some security logs, backups, billing records, or provider-held data may remain under applicable retention rules and cannot necessarily be deleted by SmaxAI.

• Conversation Purge: You can delete individual chat sessions or purge your entire chat history at any moment from the sidebar.

• Data copies: export options depend on the controls currently available in the product. Contact support for help with a privacy or access request; not every system log or provider-held record is necessarily exportable.

SmaxAI is designed in compliance with global data protection standards, including the General Data Protection Regulation (GDPR - EU), the California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection Act (DPDP Act 2023).

You have the right to access, rectify, port, or request erasure of your personal data at any time without discriminatory treatment. To submit a regulatory request, contact privacy@smaxai.in.

SmaxAI does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that a child under 13 has provided personal data, we will immediately delete that information from our systems.

We may periodically update this Privacy Policy to reflect model additions, enhanced privacy features, or regulatory updates. Continued use of SmaxAI after revision posting constitutes acceptance.

For privacy inquiries, data requests, or compliance questions: email info@smaxai.in or privacy@smaxai.in.