This Privacy Policy explains how Anomalist Enterprise LLC ("we," "us," "our") collects, uses, stores, and shares information when you use our Maximus platform and services ("the Service"), including when you connect social-media accounts such as Facebook Pages and Instagram Business accounts for us to publish content and read engagement data on your behalf.

1. Information We Collect

Information you provide directly. When you complete our intake form or sign up, we collect your name, email address, phone number, business details, industry, brand preferences, topics, competitor references, and any notes you provide. We use this information to build your content profile and deliver our services.

Information from connected social accounts. When you connect a Facebook Page or Instagram Business account through our app, Meta provides us with: Page access tokens, Page ID and name, Instagram Business account ID and username, posts you publish through our Service, and engagement metrics (reactions, comments, shares, reach, impressions, follower counts and demographics) for the Pages and accounts you have granted us access to. We only access the specific Pages and accounts you explicitly authorize during the Facebook OAuth flow.

Technical information. When you use our Service, we record session cookies (to keep you signed in), IP address, browser user-agent, and rate-limit counters. We do not use third-party advertising trackers.

2. How We Use Your Information

We use the information we collect to:

3. Legal Basis

We process your data based on your consent (given when you sign up and when you connect social accounts) and our legitimate interest in operating and improving the Service. If you withdraw consent or disconnect an account, we stop using the associated data for those purposes.

4. Meta / Facebook / Instagram Data

Our use of data obtained through Meta APIs (Facebook Graph API, Instagram Graph API) is subject to Meta's Platform Terms and Developer Policies. Specifically:

To disconnect Anomalist Enterprise LLC from your Meta account at the Meta level, visit Facebook Settings → Business Integrations, find "Maximus", and remove it. This revokes our access immediately.

5. AI Processing

We use AI models to generate content based on your brand profile, topic preferences, and feedback. These models may be operated by us or by third-party AI providers under confidentiality agreements. Content and prompts sent to AI providers are not used by those providers to train their general-purpose models (where their terms allow us to opt out, we have). Meta-sourced data is not included in prompts sent to third-party AI providers.

6. Data Storage, Retention & Security

Your data is stored on Cloudflare infrastructure. Access tokens are encrypted at rest. We retain your profile and generated content for as long as you maintain an active account. Engagement metrics pulled from Meta are retained for up to 24 months for trend analysis and then deleted or anonymized. If you close your account, we delete your profile, generated content, and all stored social tokens within 30 days, except where we are legally required to retain some records (e.g., billing records for tax purposes).

We implement reasonable administrative, technical, and physical safeguards, but no system is 100% secure. If a breach affects your data, we will notify you in accordance with applicable law.

7. Third-Party Services

We share data with a limited set of service providers strictly to operate the Service:

8. Your Rights & Choices

You may:

9. User Data Deletion

From inside the dashboard. Open the Connections tab and click Disconnect on any connected Facebook Page or Instagram account. This immediately deletes the stored access token for that account.

From Facebook (automatic). If you remove "Maximus" from Facebook → Settings & Privacy → Settings → Business Integrations, Meta notifies us automatically and we delete every access token connected by your Facebook account, along with the related profile information we received from Meta. You can also submit a Data Deletion Request to Meta for our app; Meta will call our deletion endpoint and you will receive a confirmation code that lets you check the status of the request at any time.

Full account deletion. To request complete deletion of your account and all associated data, email hello@anomalistmaximus.com from the address associated with your account with subject line "Delete my data". We will:

10. Cookies

We set first-party session cookies (maximus_session, maximus_admin_session) to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. You can clear cookies any time in your browser settings; doing so will sign you out.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and posted here with an updated "Last updated" date. Continued use of the Service after changes are posted constitutes acceptance.

13. Contact

Questions about this Privacy Policy, your data, or a deletion request? Email hello@anomalistmaximus.com.