Privacy policy

Version 1.0 · Last updated 2026-08-27

This policy describes what MaxPage actually collects, where it goes, how long it stays and what you can do about it. It was written against the software rather than from a template, so where it says we do not do something, we do not do it.

1. Who we are

MaxPage is operated by Server Host Inc., of 1309 Coffeen Ave., Sheridan, WY 82801, USA. We are responsible for the personal information described below. For anything in this policy, write to support@cenmax.in.

2. What we collect

When you open an account

Four things, and nothing else: your name, your email address, a password, and the name of your company or team. We never store the password itself. It is put through a one-way hash before it is written down, which means we cannot read it, recover it or tell you what it is.

When you are signed in

Your session is recorded in our database so that you stay signed in between pages. That record holds a session identifier, your user account, the IP address the request came from, the browser user agent it sent, and when the session was last active. This is the only place we keep your IP address or your user agent; nothing else in the product records either.

When you pay

Payments are taken by Stripe. You are redirected to Stripe's own checkout page to enter your card, and that page is not ours: the card number, the expiry date and the security code are typed into Stripe and never touch this application. What we keep afterwards is a Stripe customer identifier, the brand of the card, and its last four digits, so that the billing page can tell you which card is on file.

What you put into the product

The work itself. For each project, the domain you are researching and whatever you write in the brief: a summary, an audience, products, objectives and exclusions. Then the research built on top of it — keywords, content buckets, competitors, ranking snapshots and cached search results — and, if you use the writing features, the voice instructions and sample text you provide, the name and a checksum of any file you upload as a sample, and the drafts the model produces.

3. Cookies

Two, both necessary for the site to work: a session cookie that keeps you signed in, and a token that protects forms against cross-site request forgery. There is no analytics package, no advertising pixel and no third-party script anywhere on this site or in the product. That is why you are not being asked to dismiss a cookie banner — there is nothing here to consent to.

4. Who else sees your data

Running the service means sending some of it to companies that do specific jobs for us. These are all of them.

• Stripe, which processes payments and holds your card details. We are told the card's brand and last four digits, and nothing more.
• A third-party search-data provider, which supplies keyword figures and search results. It receives the keyword text you are researching, the domain of the project, and the location and language codes the project is set to. It never receives your name, your email address, or anything about your payment. We will tell you who it is, in writing, if you ask at support@cenmax.in.
• A third-party AI model provider, which runs the models that do the analysis and the drafting. It receives the project context you wrote, summaries of pages that were fetched, the keyword sets under discussion, your team's voice instruction and the brief for the piece being drafted. We send it none of your account details: not your name, not your email address, and nothing about your payment. What it does receive is the material just listed, which is text you wrote — so whatever you put into a brief goes with it. We will tell you who it is, in writing, if you ask at support@cenmax.in.
• A third-party email delivery provider, which delivers the emails described below. It receives your name and email address and the contents of those messages, and nothing else. We will tell you who it is, in writing, if you ask at support@cenmax.in.
• A third-party infrastructure provider, which runs the application and stores its database. Everything described in this policy lives there. We will tell you who it is and where your data is stored, in writing, if you ask at support@cenmax.in.

We do not sell your data, and we do not give it to anyone for their own purposes. We may disclose it if a law or a valid legal order requires it, and we would tell you unless we were forbidden from doing so.

5. When we fetch your pages

Some features read pages from a site you give us. We fetch only pages that are already publicly reachable, over HTTP or HTTPS, from a public host, and we will refuse to fetch an internal or private address — every address a host resolves to is checked before the request is made, and a redirect is re-checked at every hop rather than trusted. We do not sign in to anything and never fetch anything behind a login. Our crawler identifies itself as SeoResearchBot in the user agent it sends.

6. How long we keep it

Cached keyword figures and cached search results that nobody has touched for 180 days are deleted. That runs automatically once a week, early on Sunday morning. A keyword is exempt if anything still refers to it — if it sits in one of your content buckets, in the results of a research run, or in a ranking snapshot — because deleting it would silently take your own work with it.

Everything else — your account, your projects, your briefs, your buckets, your plans and your drafts — is kept for as long as your organisation is using the service. Ask us to remove it and we will, within 30 days.

We also delete accounts nobody uses, without being asked. If no member of your organisation signs in for 24 months, we erase the organisation and everything under it: the accounts of people who belong to no other organisation, your projects, your buckets, your plans, your drafts, your ranking history and your saved research. We write to the organisation's owners twice before that happens, sixty days beforehand and again fourteen days beforehand. One sign-in by anybody on your team stops it and starts the clock again. An organisation on a live paid plan is never deleted this way, whatever the sign-in dates say.

Both kinds of deletion leave exactly one thing behind: a record of each invoice — its number, its amount and its date — which tax law requires us to keep. That record carries no name, no email address, no postal address, and nothing you made in the product.

7. Email we send you

Three kinds, and no others: a weekly digest of how your tracked keywords are ranking, a password reset when you ask for one, and a message to verify your email address. We send no marketing email. There is no mailing list, and no newsletter to unsubscribe from.

8. Your privacy choices

These apply to every customer, wherever you are. To use any of them, write to support@cenmax.in from the address on your account, so that we can tell it is you.

• Know and access. Ask us what personal information we hold about you, where it came from, what we do with it and who we have shared it with, and ask for a copy.
• Correct. Most of it you can change yourself in the product. Tell us about anything you cannot, and we will fix it.
• Delete. Ask us to close your account and delete the personal information we hold. We will complete a deletion request within 30 days. The only thing we keep is the invoice record described in section 6, because a tax law requires it; it holds no personal information beyond the invoice itself.
• Opt out. You are not on a marketing list, because there is not one. If you would rather not receive the weekly ranking digest, tell us and we will stop sending it.

We will not treat you differently for exercising any of these — no worse price, no reduced service, no different level of support.

9. If you live in California

In the twelve months before the date on this page, the categories of personal information we collected are: identifiers, in the form of your name, email address and IP address; commercial information, in the form of your subscription and the card brand and last four digits on file; internet activity, in the form of the session records described above; and the content you write into the product. Each is collected for the purpose described in section 2, and comes either from you or from your own use of the service.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is no analytics package, no advertising pixel and no advertising technology of any kind in this product, so there is nothing to sell and nothing to share. You do not need to opt out of something that does not happen.

You have the right to know, to delete and to correct your personal information, and the right not to be discriminated against for asking. Section 8 explains how, and applies equally whether or not you live in California. An authorised agent may make a request on your behalf, with proof that you have authorised them.

10. If you are outside the United States

Your data is stored in the region named in section 4, and processed by the companies listed there. Two of those we describe rather than name; write to support@cenmax.in and we will tell you who they are and where they process requests. If the law where you live gives you rights over your personal information beyond those described here, write to the same address and we will work with you on them.

11. How we protect it

Passwords are hashed and never stored in a form anyone can read. Card details never reach our servers at all. The one place where our servers make a request to an address a customer chose — fetching your pages — is fenced as described in section 5, so it cannot be pointed at anything internal. No system is perfect, and we will not pretend otherwise; if something goes wrong that affects your personal information, we will tell you.

12. Children

This is a product sold to businesses. It is not directed at children, and we do not knowingly collect personal information from anyone under sixteen. If we learn that we have, we will delete it.

13. Changes to this policy

When this policy changes, the version number and date under the heading change with it. If a change materially affects you, we will tell you by email or in the product before it takes effect.