Privacy Policy

Last updated: September 12, 2026

Maxna AI ("Maxna," "we," "us") provides sample integrity technology for market research. This policy describes how we collect, use, and protect information when you visit maxna.ai or use our services. If you have a signed customer agreement or data processing addendum (DPA), that agreement controls for product data to the extent of any conflict with this policy.

Notice at collection

We collect identifiers and professional contact details you submit (name, work email, company, message); internet and device data (IP address, browser/device type, pages viewed, timestamps, and security logs); account data for customer users; and, if you accept analytics, Google Analytics usage data. We use this to run the site, answer inquiries, authenticate users, prevent abuse, and (with consent) understand traffic. We do not sell personal information. Analytics is off until you accept. California residents can opt out of any sale or sharing via Privacy Choices, the Reject control, or a Global Privacy Control (GPC) signal. Retention is described below. Full details follow in this policy.

Scope

This policy covers (1) visitors to our marketing website, (2) people who submit demo, contact, or privacy-request forms, and (3) authorized users of the Maxna platform. It does not replace customer instructions for respondent-level processing performed on behalf of a research buyer or panel under a services agreement.

Information we collect

Information you provide

• Contact and business details submitted via demo, contact, or support forms (such as name, email, company, role, and message content)
• Account and workspace details for customer users (such as name, work email, and organization)
• Communications you send us by email or during sales and support conversations

Information collected automatically

• Technical logs such as IP address, browser type, device type, referring URL, pages viewed, and approximate timestamps
• Essential cookies or similar storage used to run the site, keep sessions secure, and remember cookie preferences
• Analytics cookies or similar technologies (Google Analytics) only after you accept
• Product usage events needed to operate, secure, and improve fraud-detection features for authorized customers

Information processed for customers

When customers use Maxna to screen survey traffic, we process technical and behavioral signals about respondents as instructed by the customer (for example device, network, interaction, and response-quality signals). That processing is performed to provide the service, not to sell respondent lists or sample. Customers are the controller for that respondent data; Maxna acts as their processor.

Sources

We collect information from you, from your browser or device, from our service providers that help us host and secure the site, and from the customer that configured a project (for platform and respondent processing).

How we use information

• To respond to sales, partnership, support, and privacy inquiries
• To operate, secure, troubleshoot, and improve the Maxna platform
• To provide fraud and quality signals to customer projects
• To authenticate users and prevent abuse of our website and services
• To send service-related notices and, where permitted, product updates
• To measure marketing-site traffic if you accept analytics
• To comply with law, enforce our terms, and protect Maxna and our customers

Legal bases (where applicable)

Depending on your location, we may rely on one or more of the following: performance of a contract; legitimate interests in operating a secure B2B product and marketing site; consent where required (for example analytics cookies); and compliance with legal obligations. You may withdraw cookie consent at any time via Cookies or Privacy Choices in the footer.

Sharing

We do not sell personal information for money. If Google Analytics is enabled, some privacy laws treat that as "sharing" for cross-context advertising measurement. You can opt out with Reject, Privacy Choices, or GPC. We may also share information with:

• Service providers that host infrastructure, send email, provide analytics (only if you accept), or support customer operations - under contracts that limit use to providing services to Maxna
• Professional advisors (legal, accounting, security) under confidentiality obligations
• Authorities when required by law, legal process, or to protect rights, safety, and security
• A successor entity in connection with a merger, acquisition, or asset sale, subject to appropriate protections

Customer project outputs (such as pass/fail decisions and reject reasons) are shared with the customer that configured the project, as part of the service.

Service providers

Depending on the product, we use hosting and database providers, authentication services, security tools (including reCAPTCHA on survey screening), and AI model providers to score quality. Marketing analytics (Google Analytics) loads only after consent. A current list is available on request via our privacy request form.

Cookies and similar technologies

Essential storage runs the site, security, and your cookie choice. Analytics (Google Analytics) is optional and off by default. We do not load analytics scripts until you click Accept or enable Analytics in Preferences. reCAPTCHA may load on survey screening pages as a security control for that service. You can Reject, change Preferences, or use Privacy Choices at any time. Blocking essential cookies may affect site functionality.

Do not sell or share (CCPA/CPRA)

We do not sell personal information. To opt out of sharing (including analytics), click Privacy Choices, Reject on the cookie bar, or send a GPC signal. We honor GPC as an opt-out of sale or sharing. We do not use or disclose sensitive personal information for purposes that require a separate "Limit the Use" link on the marketing site. We do not use marketing-site data for cross-context behavioral advertising other than optional analytics you can refuse.

Retention

• Marketing and demo inquiries: typically up to 24 months, or sooner if you ask us to delete where applicable
• Cookie preference: until you clear site data or change your choice
• Analytics data (if accepted): per Google Analytics defaults, typically 14 months
• Customer account and platform logs: for the life of the account and a limited period afterward for security, billing, and legal requirements
• Respondent data processed for customers: as specified in the customer agreement or DPA, then deleted or returned

Security

We apply administrative, technical, and organizational safeguards appropriate to the sensitivity of the data we process, including access controls, encryption in transit where appropriate, and monitoring for abuse. No method of transmission or storage over the Internet is 100% secure, and we cannot guarantee absolute security.

International transfers

Maxna may process information in the United States and other countries where we or our processors operate. Where required, we use appropriate transfer mechanisms (such as standard contractual clauses) for cross-border transfers of personal data.

Your rights

Depending on your location (including under GDPR, UK GDPR, or CCPA/CPRA), you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; to withdraw consent; to opt out of the sale or sharing of personal information; and to non-discrimination for exercising these rights. We will not deny goods or services, charge a different price, or provide a different quality because you exercised a privacy right, except as permitted by law. To exercise rights, submit a privacy request. We may need to verify your identity (for example matching the email you used). Authorized agents may submit requests where permitted by law. We aim to respond within 30 days (GDPR) or 45 days (CCPA/CPRA), and may extend once where the law allows. You may lodge a complaint with a supervisory authority. For respondent data processed under a DPA, contact the customer (controller) or the privacy contact named in that agreement.

Children

Maxna's website and platform are directed to business users. We do not knowingly collect personal information from children under 16 through the marketing site.

Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be communicated through the site or by email where appropriate.

Contact

Privacy questions and rights requests: privacy request form. For customer respondent data processed under a DPA, contact your Maxna account team or the privacy contact named in that agreement.