Privacy Policy

1. Our Architecture: Dedicated, Customer-Controlled Hardware

Each Maigent customer is provisioned dedicated hardware that stores their data and runs Maigent's AI models locally. Specifically:

• Authentication takes place directly on your dedicated hardware. Maigent does not operate a central authentication server that stores your account credentials.
• Your communications, documents, project data, and other content are stored only on your dedicated hardware and are not copied to Maigent's corporate servers.
• AI processing, including reading communications, drafting messages, and running projects, is performed locally on your hardware using Maigent's approved AI models. Your content is not transmitted to any third-party AI provider for this processing.
• Your dedicated hardware may be located at your premises, in a Maigent-operated facility, or in a third-party colocation facility, depending on your deployment.

a. Remote Access. Maigent does not have standing access to your dedicated hardware. You may grant Maigent remote access for maintenance or support purposes; this access is off by default, requires your explicit authorization for each grant, and can be revoked by you at any time. You control when software updates are installed on your hardware, similar to how you control when updates are installed on a mobile device, and installing them does not require standing remote access from Maigent.

If you authorize remote access, our support personnel may be able to view data on your hardware during that session for the purpose of providing support. We do not access your hardware without your authorization, except where required to comply with law or to prevent imminent harm to the Service, your hardware, or others.

During an authorized remote access session, our support personnel may use company-approved, enterprise-configured AI tools to help diagnose or resolve your request. These tools are contractually configured not to use your data to train their underlying models, and any content submitted to them is limited to what is reasonably necessary to provide support.

2. Information We Collect

a. Account & Business Information (held by Maigent). To operate your subscription and account, we collect your name, business/organization name (if applicable), email address, billing and payment details, and any support communications you send us directly.

b. Content Processed on Your Dedicated Hardware (not held by Maigent). This includes the content of communications and files from connected platforms, project data, and content Maigent drafts or reviews on your behalf. This data resides exclusively on your dedicated hardware as described in Section 1, and Maigent does not have routine access to it, except as described in Section 1(a) regarding authorized support sessions.

c. Diagnostic Data. Limited technical data about your hardware's operation may be transmitted to Maigent to support the Service and maintain hardware health. This is limited to:

• The version of the Maigent application currently running on your hardware.
• The timestamp of the last heartbeat detected from your hardware.
• The name of the AI model(s) running locally on your hardware.
• The online/offline status of your inference backend engine.
• Whether remote access by Maigent staff is currently authorized by you (true/false).

d. Website & Session Data. If you use our marketing website or account portal, we collect usage data (e.g., IP address, browser type, pages visited) and session interaction data through analytics tools, including mouse movements, clicks, scroll behavior, and engagement patterns. Data fields entered by users are masked; only non-identifiable metadata (operating system, browser type, and geographic location at the state/country level) is collected.

3. How We Use Information

• Account information: to provide and maintain the Service, process payments, manage subscriptions, and respond to inquiries.
• Diagnostic data: to maintain, troubleshoot, and update your dedicated hardware.
• Website session data: to analyze and improve the usability of our marketing site and account portal, including through anonymized session recordings.

We do not use the content stored on your dedicated hardware for any purpose other than providing the Service to you, and we do not access it without your authorization except as described in Section 1.

4. Local Personalization; No Model Training

Maigent's AI adapts its behavior over time based on your usage and content, for example, learning your communication style or project preferences. This adaptation:

• Occurs locally on your dedicated hardware.
• Is not transmitted to Maigent or aggregated with data from other customers.
• Is distinct from model “training”: we do not use your content to train or fine-tune the underlying AI models used across Maigent's customer base.

5. Third-Party Platform Integrations

Maigent integrates with third-party platforms you choose to connect. When you connect an account, Maigent accesses data through that platform's official API, in accordance with the authorization (e.g., OAuth scopes) you grant and that platform's applicable developer terms.

Google API Services User Data Policy. Where the Service integrates with Google Workspace or other Google APIs, Maigent's use and transfer of information received from those APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is processed locally on your dedicated hardware; is not used for advertising; is not transferred to third parties except as necessary to provide features you request; and is not read by Maigent personnel except (i) with your affirmative agreement for a specific support session, (ii) where necessary for security purposes, (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized.

Comparable restrictions apply to any other integrated platform (e.g., Microsoft/Azure, Slack), each governed by that platform's respective developer and API terms.

6. Data Sharing and Disclosure

We do not sell your personal information. Because content processed by Maigent resides on your dedicated hardware rather than our servers, there is generally no customer content for us to share. We may share account and billing information with service providers who help us operate the business side of the Service (e.g., payment processors), under confidentiality obligations. We may disclose information where required by law or to protect the rights, property, or safety of Maigent, our customers, or others.

7. Data Retention

• Account and billing information is retained for as long as your account is active, and for a limited period thereafter as needed for legal, tax, or accounting purposes.
• Content on your dedicated hardware is retained according to your own settings and storage capacity, and is not otherwise retained by Maigent.
• Website session data is retained per our analytics provider's standard retention periods.
• Upon termination and return of your dedicated hardware, all storage is wiped using DBAN (Darik's Boot and Nuke) and the operating system is fully reinstalled before the hardware is reused.

8. Security

We use reasonable security measures to protect information. Because data resides on customer-dedicated hardware, security also depends in part on physical and network security at the hardware's location and on your management of remote-access permissions. No system is 100% secure; use the Service at your own risk.

9. Your Rights

You may access, update, or delete your account information by contacting us. Because content on your dedicated hardware is under your control, you may access, export, or delete that content directly through the Service at any time. Depending on your location, you may have additional rights under applicable data protection laws.

10. Children's Privacy

Maigent is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18, and by using the Service you represent that you are at least 18 years old.

11. International Users and Business Customers

Because dedicated hardware may be located in different jurisdictions depending on your deployment, the location and law governing your data may vary by customer. Business customers should refer to their Data Processing Agreement (“DPA”) for details regarding subprocessors, international transfer mechanisms, and data residency commitments. Contact us at support@maigent.ai to request a DPA.

12. Compliance with Data Protection Laws

Maigent complies with applicable data protection regulations, including the General Data Protection Regulation (GDPR) for users in the European Economic Area and the California Consumer Privacy Act (CCPA) for California residents. If you are a resident of one of these jurisdictions, you may have specific rights regarding your personal data, including the right to access, correct, delete, or restrict use of your data, and the right to object to certain processing or withdraw consent. To exercise these rights, contact us at support@maigent.ai.

13. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the Service constitutes acceptance of the new terms.

14. Contact

For questions about this policy, contact us at support@maigent.ai.