Privacy Policy

Last updated 4 November 2026. This page explains what MaxAI.bd stores and how deletion and sharing work.

What we store

• Chats and images. Messages, replies, attached text and generated images are stored so you can return to a conversation.
• Account details. An account stores your name, email address and a hashed password when you set one. For Google or GitHub sign-in, we store the provider name, account identifier and verified email. Provider access tokens are discarded after sign-in. Passwords are not stored in readable form.
• Guest identity. A random cookie connects guest chats to your browser.
• Usage records. Daily limits use an account identifier or a one-way hash of your IP address. Hosting and security logs may also contain network information such as IP addresses.
• Technical logs. The application records errors to diagnose problems. Do not include secrets in a chat or support request.

How requests are processed

Your prompts and relevant conversation context, including attached file text, are sent through GetVibe API to AI processing services used by MaxAI.bd. Verification and password-reset emails are sent through our Mailbig email service. Image requests may be translated before processing. Avoid passwords, payment details, identity numbers and other sensitive information.

Cookies and browser storage

Session and security cookies keep you signed in and protect requests. A guest cookie identifies your browser's chats. Browser storage remembers language, theme, mode and an unsent prompt when moving into chat. We do not use advertising cookies.

Retention and deletion

• Guest messages expire 30 days after creation. Inactive guest chats are also removed after that period.
• Account messages expire 180 days after creation, even in an active chat. Inactive account chats are removed after that period. Generated images expire after 90 days. These periods also apply to saved share snapshots. Scheduled cleanup removes expired records and files in batches.
• You can delete chats earlier. Deleting a chat or account removes its generated image files from active server storage. Backups follow the server's backup retention schedule.
• Usage counters become eligible for cleanup after about 60 days.

Sharing

A share link shows a saved snapshot of the conversation at the moment you share it. Later messages and edits are not added. Shared pages are unlisted and marked noindex, but anyone with the link can open them or save a copy.

Images in private chats require the owner's access. Shared images use the active share link. Stopping sharing blocks new requests to that share page and its image routes. It cannot erase copies that somebody already downloaded or that a browser cached before access changed.

Your choices

Delete one chat or all chats from the chat menu. To request account deletion or ask about your data, email [email protected] from the address on your account. We may need to verify that the account is yours.

Children

MaxAI.bd is not intended for children under 13.

Changes

We will update this page and its date when these practices change.

Cloudflare helps protect this service against automated abuse. Its security checks process browser and network signals. Admin email codes are stored as short-lived hashes and are never included in public pages.