Privacy Policy
This Privacy Policy explains how Maximize Solutions, LLC ("Maximize," "we," "us," or "our") collects, uses, stores, shares, and protects information in connection with the SlatePro platform, including the administrative application at os.maximize.media, the client portal at client.maximize.media, and our marketing site at slatepro.ai (collectively, the "Service"). We provide a content and marketing-agency platform that lets our clients connect their own third-party accounts — including Google services — so that we can surface their content performance and analytics, assist with content production, and communicate with them. This policy describes, in particular, how we handle data obtained through Google APIs, and our handling of that data complies with the Google API Services User Data Policy, including the Limited Use requirements (see the Google User Data and Limited Use section below). If you have questions, contact us at support@maximizehq.com. These third-party services also include TikTok. When a client connects a TikTok account, we access the account's basic profile information and, only at the client's direction, publish the client's videos to that account through TikTok's official APIs. We store the access tokens needed for these features securely, we do not sell TikTok data, and we do not use it for advertising. A client can disconnect TikTok at any time, and we delete the associated tokens when they do.
1. Who this policy covers
This policy applies to:
- Clients and client users who hold accounts in the SlatePro client portal.
- Administrators and staff who use the SlatePro administrative application.
- Visitors to our marketing website.
It applies to all data we process through the Service, including data you provide directly, data we generate, and data we access from third-party services you connect (such as Google).
2. Information we collect
2.1 Information you provide to us
Account and contact information — name, email address, business name, role, and login credentials or authentication identifiers. Content and requests — briefs, project requests, messages you send to our in-product AI assistants, files, and other materials you submit to the Service. Billing information — we use Stripe to process payments. Payment card details are collected and handled directly by Stripe under its own terms and privacy policy; we do not store full card numbers on our systems. We retain limited billing records (such as transaction history, plan, and billing contact).
2.2 Google user data accessed through Google APIs
When you connect a Google account, you grant the Service permission, through Google's OAuth consent screen, to access specific categories of data. We request the minimum scopes needed for the features you use, and we only access this data to provide features that are visible to you in the Service. Depending on the integrations you enable, this may include:
Google Drive. There are two Drive connections, and each is a separate permission you grant in context. (1) Workspace Drive (drive.file): for a client workspace, we create folders and files in the connected Drive to hold the content we produce, and we read, update, and organize only the files the Service created or that you opened with it. (2) My Google Drive (drive.readonly): a person may connect their own Google Drive so they can browse, search, and choose their own videos and photos while creating a social post inside the Service. Under this permission we can only read; we never create, change, move, or delete anything in that Drive. When you choose a file, the Service copies that one file into the client workspace's content library so it can be scheduled and published. We do not scan, index, or copy any other files, and we do not store a listing of your Drive. You can disconnect My Google Drive at any time in Settings; files already copied into the workspace library stay there until you delete them from the library.
Gmail (staff and contractor accounts only). A member of our team, or a contractor working in our workspace, may connect their own Gmail account to the built-in CRM so that email with the clients and contacts they work with appears alongside those records. This is a per-person connection: each person connects their own mailbox, and no one can connect a mailbox they do not own. With the gmail.modify permission we (a) read and copy into the CRM the messages that match the person's sync preferences (a chosen look-back period of 3 days to 2 years, chosen Gmail labels, and, by default, only conversations with people who are already CRM contacts, portal users, or at a client's email domain; the person can also block specific addresses and domains), (b) mirror the person's own actions, so that archiving, deleting, or marking a conversation read in the CRM does the same in Gmail, and (c) save drafts written in the CRM as Gmail drafts. With the gmail.send permission we send the replies, forwards, and new messages the person writes in the CRM from their own Gmail address, so they appear in their Gmail Sent folder like any other email. We do not read or send email for any purpose other than showing it in, and sending it from, the CRM at the person's direction. Newsletters, automated notifications, and conversations that are only between our own team are skipped. Attachments are not stored on our servers; when someone opens one, it is fetched from Gmail at that moment using that person's own connection. Synced conversations are private to the person who synced them unless that person marks a conversation as shared with the rest of the workspace. Disconnecting Gmail in Settings stops syncing and sending immediately; conversations already copied into the CRM remain there, and the person or workspace owner can delete them, or ask us to, at any time (see Section 8).
YouTube Data and YouTube Analytics (including monetary analytics) — to provide our publishing and reporting features, we (a) upload videos to your connected YouTube channel on your behalf and manage videos we publish for you — setting their visibility, title, description, tags, and thumbnail, adding them to playlists, and removing a video at your request; and (b) read your channel information, video metadata and statistics, and audience and traffic data, and (where you have granted the monetary scope) estimated revenue, in order to display content-performance and revenue dashboards to you. Analytics access is read-only; video upload and management require write access, which you authorize when you connect your channel.
We request access in context (incremental authorization), so that you understand which data is involved and why at the time you grant it. We do not request access to data we do not need, and we do not request access to "future-proof" features that are not yet implemented.
2.3 Information collected automatically
Usage and log data — IP address, device and browser information, pages and features accessed, timestamps, and diagnostic logs. Cookies and similar technologies — used for authentication, session management, and basic analytics. You can control cookies through your browser settings; some features may not function without them.
3. How we use information
We use the information described above to:
- Provide, operate, secure, and maintain the Service;
- Authenticate users and manage accounts;
- Display content-performance, analytics, and revenue dashboards from your connected accounts;
- Create, read, update, and save documents you work on through the Service;
- Send communications you initiate or authorize, and operational/service messages;
- Process payments and manage subscriptions;
- Provide AI-assisted features (see Section 6);
- Monitor, troubleshoot, prevent abuse, and improve the reliability and security of the Service; and
- Comply with legal obligations.
Our use of Google user data is limited to the practices disclosed in this Privacy Policy. If we ever want to use Google user data in a new way or for a new purpose, we will update this policy and obtain your consent before doing so.
4. Google User Data and Limited Use
Maximize Solutions, LLC's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Consistent with those Limited Use requirements, we affirm that information received from Google APIs is not:
- used or transferred for serving advertisements, including retargeted, personalized, or interest-based advertising;
- used or transferred to determine creditworthiness or for lending purposes;
- sold or transferred to data brokers, information resellers, or other parties for those parties' independent use;
- used to train, fine-tune, or improve generalized or non-personalized artificial-intelligence or machine-learning models; or
- read by humans, except (a) with your affirmative agreement to view specific data, (b) as necessary for security purposes or to investigate abuse or comply with applicable law, (c) where required to operate or troubleshoot the Service and only to the minimum extent necessary, or (d) where the data has been aggregated or anonymized and is used for internal operations in accordance with applicable law.
We limit our use of Google user data to providing and improving the user-facing features that are prominent in the Service, and we transfer such data to others only as necessary to provide those features (see Section 7).
5. YouTube API Services
The Service uses YouTube API Services. By connecting your YouTube channel and using YouTube-powered features of the Service, you agree to be bound by the YouTube Terms of Service. Data obtained from the YouTube API Services is also subject to the Google Privacy Policy. We encourage you to review it. We access YouTube channel, video, analytics, and (where granted) revenue data solely to present performance and revenue reporting to you within the Service, as described in Section 2.2. We do not use this data for any purpose not described in this policy. Revoking access and deleting YouTube data. You can revoke the Service's access to your YouTube and other Google data at any time through the Google security settings page at https://security.google.com/settings/security/permissions, or by disconnecting the integration within the Service. You may also request deletion of YouTube-derived data we hold by contacting support@maximizehq.com (see Section 9). We do not store YouTube data indefinitely and we honor cache-expiration requirements for any cached API data.
6. AI-assisted features
The Service includes AI assistants that help with content production and related tasks. To provide these features, relevant content you submit — and, where applicable, data from your connected accounts that is necessary for the requested task — may be processed by third-party AI model providers acting as our subprocessors (for example, Anthropic). This processing is performed solely to generate the user-facing output you request. We do not use, and we do not permit our AI subprocessors to use, your Google user data to train or improve generalized AI/ML models. AI processing of Google user data is limited to providing the in-product features that are visible to you.
7. How we share information
We do not sell your personal information, and we do not transfer Google user data to data brokers. We share information only as follows:
Service providers / subprocessors acting on our behalf and under contractual confidentiality and data-protection obligations, including: Anthropic — AI model processing for in-product assistant features; Stripe — payment processing; Supabase — application database, authentication, and file storage; Google — as the source of connected-account data and pursuant to Google's terms.
Within your organization — client users and authorized administrators may access data associated with the relevant client account in order to operate the Service. Email synced from a team member's Gmail is visible only to that team member unless they choose to share a specific conversation with the workspace.
Legal and safety — when required by law, legal process, or to protect the rights, safety, and security of users, the public, or the Service.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
8. Data retention and deletion
We retain personal information and Google user data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may at any time:
Disconnect a connected account within the Service or via https://security.google.com/settings/security/permissions;
Request deletion of your account and associated data by contacting team@maximizehq.com. When you disconnect Gmail or My Google Drive, we delete the stored connection credentials at once. Email copied into the CRM, and files copied into a workspace library, remain until deleted in the Service or by request, so that your team's records stay intact.
Upon a valid deletion request, we will delete or anonymize the relevant data within a commercially reasonable period, except where retention is required by law.
9. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent. Where applicable (for example, under the GDPR or the CCPA/CPRA), we honor these rights. To exercise them, contact support@maximizehq.com. We will not discriminate against you for exercising any of these rights. If you are in the EEA, UK, or a similar jurisdiction, our legal bases for processing include performance of a contract, your consent, our legitimate interests, and compliance with legal obligations.
10. Security
We take reasonable and appropriate technical and organizational measures to protect personal information and Google user data in transit and at rest against unauthorized access, use, alteration, loss, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International data transfers
We may process and store information in the United States and other countries. Where we transfer personal information across borders, we use appropriate safeguards as required by applicable law.
12. Children's privacy
The Service is intended for businesses and is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes — including any change to how we use Google user data — we will notify you and, where required, obtain your consent before the change takes effect. The "Last updated" date above reflects the latest version.
14. Contact us
Maximize Solutions, LLC 200 S. First Street, Ann Arbor, MI 48104 Email: support@maximizehq.com