your data is yours.

01 Who we are

Máximo is a Shopify app operated by mthd studio, llc., a Delaware limited liability company. When this policy says "we", "us", or "Máximo", we mean mthd studio, llc.

Our mailing address is available upon request, and a contact email is listed at the bottom of this page.

02 What we collect

From your Shopify store

Once you install Máximo and grant access, we read:

• Product data: titles, descriptions, prices, images, variants, inventory, metafields, and collections
• Order data: line items, totals, currency, customer location (country / region), order timestamps, and customer identifiers needed for attribution and product features (see below)
• Customer data: when your store grants the relevant Shopify scopes, we may read customer email, phone, name, and address fields. We use these for conversion matching (hashed where platforms require it), identity stitching across storefront and offline events, predicted LTV modeling, and optional CRM syncs you enable (for example Klaviyo Profiles). Sensitive identity fields may be stored sealed (encrypted at rest) and/or as platform-specific hashes rather than raw values where the product allows
• Shop configuration: your domain, currency, locale, and which sales channels you have connected

From your ad and marketing platform accounts

When you connect Google, Meta, TikTok, Pinterest, or Klaviyo, we receive the API access needed to publish catalogs, conversion events, and (where you enable it) profile properties on your behalf. We use that access only for the destinations and features you turn on.

From your website visitors (via the Máximo pixel)

If you install our first-party tracking pixel, we collect:

• A first-party visitor identifier stored on your subdomain
• Page views, product views, add-to-cart, checkout, and purchase events
• Browser metadata (user agent, viewport, referrer)
• Consent signals from your storefront (for example Google Consent Mode) so we can respect ad_user_data / ad_personalization state when forwarding events
• When available at checkout or from known customer identity, email / phone / name used for enhanced conversions and server-side matching — typically hashed before leaving Máximo for ad platforms

We do not sell visitor data or use it to identify people outside the context of your store and the destinations you connect.

03 How we use it

We use the data we collect to operate the Máximo product for your store. Specifically:

• Building and syncing your product catalogs to Google Merchant Center, Meta Catalog, TikTok Shop, Pinterest, and Klaviyo (when connected)
• Publishing conversion events to ad and marketing platforms via their server APIs (Google Ads / GA4, Meta CAPI, TikTok Events API, Pinterest Conversions API, Klaviyo Events API)
• Stitching storefront and offline identity so the same person can be attributed across devices and channels inside your shop
• Enhanced match / hashed user data for the platforms you connect, subject to your storefront consent settings
• Predicted lifetime value (pLTV) modeling from order history, with merchant consent before live emission to destinations
• Generating channel-specific AI suggestions on titles, descriptions, and attributes; catalog intelligence (classification / structure); and Ask Máximo answers — scoped to your shop, with results visible only inside your Máximo dashboard unless you explicitly publish something (see Agentic Commerce below)
• Agentic Commerce / AI Discovery: when you enable it, publishing public catalog artifacts (for example feeds, sitemaps, structured data) and notifying search / AI shopping indexes via IndexNow so assistants and crawlers can discover your products
• Sending you operational emails (account, billing, security, and product digests you opt into)
• Diagnosing issues you report and monitoring product health

04 Who we share it with

Máximo shares data only with the platforms required to deliver the service:

• Marketing platforms you connect: Google, Meta, TikTok, Pinterest, Klaviyo (and any other you enable). Depending on what you turn on, we may send catalog data, conversion events, hashed match identifiers, and (for Klaviyo) profile properties such as email and predicted LTV
• AI shopping / discovery indexes you enable: when Agentic Commerce IndexNow is on, we submit public catalog URLs to IndexNow (used by Bing, Copilot, and other participating indexes)
• Infrastructure providers: AWS (hosting, database, storage, logs/metrics), Resend (transactional email), New Relic (monitoring), PostHog (website analytics and session replay). App billing is handled by Shopify. These are processors acting under contract
• AI providers: when you use AI features, we send the relevant inputs to Anthropic (text / chat) and Voyage AI (embeddings). These calls are made under agreements that prohibit training on your data (see §5)

The full list of subprocessors, with what each one does, is in §6.

On our own website, getmaximo.ai, we also use a third-party visitor-identification service that helps us identify visitors and their companies for sales outreach (see §9). It receives website visit data, never your store data.

We do not sell your data. We do not share it with marketers, brokers, or any third party not listed above.

05 AI & training data

Máximo uses Anthropic (Claude) for text and chat, and Voyage AI for embeddings, to power Catalog Intelligence, channel suggestions, Ask Máximo, and catalog retrieval. Relevant product fields and shop context are sent to those providers when a feature runs. Their agreements prohibit training foundation models on that API data. Anthropic deletes API inputs and outputs within 30 days (zero data retention is not enabled). Ask Máximo may also call Anthropic web tools against allow-listed public docs.

For Máximo's own models: we do not train on your customer data, order data, or other store-identifiable data. We may use aggregate or de-identified product and catalog patterns across merchants to improve the product for everyone. Those systems are not meant to memorize or reproduce one merchant's identifiable catalog or customer list.

Catalog Intelligence and Ask Máximo are part of the core product and cannot be turned off. Channel suggestions and Agentic Commerce publishing are controlled in settings.

06 Subprocessors

A subprocessor is a third party we engage to process personal data on your behalf to run Máximo. If we add or replace a subprocessor, we update this list and email you at least 30 days in advance, as described in our Data Processing Addendum. Shopify is not a Máximo subprocessor: your store's relationship with Shopify is direct, and Shopify handles app billing under its own terms.

Core subprocessors

These are active for every Máximo store.

Marketing and discovery platforms you connect

These are not Máximo subprocessors. Each receives data from Máximo only when you connect or enable that channel, under your own account and that platform's terms. Connecting one authorizes Máximo to publish the data types listed for that platform.

07 Security & storage

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Selected identity fields may be sealed with additional application-level encryption. Access to production systems is restricted to a small number of Máximo engineers, audited, and gated by hardware 2FA.

Production infrastructure currently runs in AWS US regions (today, us-west-2). That means store, catalog, order, identity, and event data are processed and stored in the United States, including for EU and UK merchants, unless we later offer a separate regional deployment and say so here. We use contractual safeguards with subprocessors (including a Data Processing Addendum on request: email privacy@mthd.studio) for cross-border transfers where required.

We report a security incident within 72 hours of confirmation, in line with GDPR Article 33 and Shopify partner obligations.

08 Your rights

Regardless of where you're located, you can:

• Access: request a copy of all data Máximo holds about your store
• Export: download your catalog, suggestion history, and event logs at any time from your settings
• Correct: fix any data we hold
• Delete: uninstall the app or email privacy@mthd.studio to wipe everything within 30 days
• Portability: receive your data in a structured, machine-readable format

Under GDPR (EU/UK), CCPA/CPRA (California), and similar regimes, you may also lodge a complaint with your local data protection authority. But we'd much rather you tell us first.

09 Cookies & tracking

This website, getmaximo.ai, uses PostHog to show us which pages are useful and how visitors reach the waitlist and the AI Readiness Audit. What happens before you answer the cookie banner depends on where you are browsing from:

• In the European Economic Area, the United Kingdom and Switzerland, PostHog records nothing until you answer.
• Everywhere else, PostHog works as if you had accepted from your first page, and the banner lets you opt out. If your browser sends a Global Privacy Control signal, we wait for your answer instead.

We work out which applies from your IP address on each visit and keep only the result, in a cookie that ends with your browser session. Then:

• If you accept, or haven't opted out where tracking starts without asking, PostHog sets first-party cookies and local storage on getmaximo.ai so it can recognize your browser on later visits, for up to 12 months. It records the pages you view, what you click, your IP address and approximate location, and whether you join the waitlist, request an audit, or subscribe to the blog. It also records your visit as a session replay (how you scroll, click, and move around each page) so we can see where the site gets in your way. Form fields are masked in replays. When you submit one of our forms (the waitlist, the AI Readiness Audit, or the blog newsletter), we link that analytics history, earlier visits and replays from the same browser included, to the email address you gave us, plus your name and store address where the form asks for them, so we can see how you found us. For waitlist sign-ups it also notes the ranges and channels you pick.
• If you decline or opt out, PostHog sets no cookies and makes no session replay, and deletes the ones it set before. It still records page views and clicks, but anonymously: they are tied to a one-way hash that changes every day rather than to your browser, and your IP address is not kept. Submitting a form doesn't change that.

Outside the European Economic Area, the United Kingdom and Switzerland, we also load a third-party visitor-identification service unless you opt out. It uses cookies to help identify visitors and their companies, including visitors who haven't filled in any of our forms, for our sales outreach. It never loads in those regions, when your browser sends a Global Privacy Control signal, or once you opt out.

You can change your answer at any time from Cookie settings at the foot of every page. Opting out after the visitor-identification service has loaded reloads the page to stop it; it stays off on later pages unless you change your answer. This does not delete information already collected or cookies already set; contact us using the details below to exercise your data rights. If we start using cookies or recordings for anything new, we'll ask you again, or tell you where tracking starts without asking; an opt-out you have already made stays in place. The site also runs Vercel Web Analytics, which counts page views without cookies.

The Máximo pixel, installed only if you choose to enable first-party tracking on your storefront, sets a first-party cookie on your subdomain to identify returning visitors for the purpose of attributing their conversions. This cookie is governed by your store's own cookie banner and consent flow, not ours.

10 Retention

• Active store data: retained while you're an active Máximo customer
• Conversion and storefront events: retained while your store is active, for attribution and product analytics. You can request deletion under §8
• AI suggestion history and Ask Máximo conversations: retained while your store is active (Ask Máximo keeps a bounded recent conversation history). Deleted with your store data on uninstall / erasure
• Billing records: retained for 7 years where required for legal / tax purposes (billing itself is handled by Shopify)
• Uninstalled stores: all non-billing data deleted within 30 days of uninstall

11 Changes to this policy

If we make material changes, we'll email the primary contact on your Máximo account at least 30 days before they take effect. Continued use of Máximo after the effective date means you accept the updated policy.

12 Contact

Privacy questions: privacy@mthd.studio
Everything else: hi@getmaximo.ai