Privacy Policy

Effective Date: 27 March 2026

Last Updated: 15 April 2026

This Privacy Policy applies to services provided by Elvynox Tech (a registered sole proprietorship in India), including its website, client portals, authenticated application areas, and SaaS platforms including the Engage Max workstation ("we," "our," "us"). We are committed to handling your information responsibly and transparently. We do not sell personal information and we do not collect or store your social media account passwords.

1. Information We Collect

We collect certain information to operate, secure, and improve our Services, including:

  • Account Information: When you register, we collect your name, email address, and workspace preferences.
  • Portal Access & Authentication Logs: When accessing client portals or authenticated application areas, we collect session data, login timestamps, and security challenge responses (e.g., Turnstile) to prevent unauthorized access and maintain security.
  • Marketing & Contact Information: If you request updates, or contact us through forms, we may collect your name, email address, and any information you choose to provide.
  • User Content: We store the content you create, upload, or schedule through our platform, including post text, media files (images/videos), drafts, and publishing schedules.
  • Usage Data: We automatically collect information about how you interact with our Services, such as IP addresses, browser types, device identifiers, and page interaction data.

2. How We Use Information

We use the information we collect to:

  • Operate, maintain, and improve the Engage Max platform and client portals.
  • Facilitate social media publishing, analytics, and related account-connected features via authorized APIs.
  • Provide customer support and respond to your inquiries, feedback, or support requests.
  • Send technical notices, updates, security alerts, and administrative messages.
  • Send product announcements, onboarding communications, or marketing emails where permitted by law or where you have opted in.
  • Monitor and analyze trends, usage, and activities in connection with our Services.
  • Detect, investigate, and prevent fraudulent transactions, unauthorized portal access, and other illegal activities.

4. Cookies & Tracking Technologies

We use cookies and similar technologies for authentication, security, analytics, and site functionality. These include:

  • Required Cookies: Essential for site security, portal session management, and core functionality.
  • Analytics (Google Analytics & Microsoft Clarity): We use Google Analytics (G-BDVQ5VL5X9) and Microsoft Clarity to understand how visitors interact with our website. This data is anonymized and aggregated to improve performance. Microsoft Clarity captures qualitative behavioral metrics (e.g., clicks, scrolls) to improve user experience, and masks sensitive inputs by default.
  • Security (Cloudflare Turnstile): We use Turnstile to protect against spam and bot abuse without requiring intrusive challenges.
  • External Resources (CDNs): Our Services load certain resources from external Content Delivery Networks (CDNs) for performance optimization. Your IP address may be logged by the CDN provider.

For a detailed list of all cookies and tracking technologies used, please see our Cookie Policy.

5. How We Share Information

We may share information only in the limited circumstances described below:

  • Service Providers: Cloud infrastructure, analytics providers, and email service tools who work on our behalf.
  • Professional Advisors: Lawyers, auditors, or insurers where necessary.
  • Compliance with Laws: If required by a legal request or to protect our rights.
  • Business Transfers: In connection with a merger, sale, or acquisition of our business.

6. Data Retention

We retain information only for as long as necessary to provide the Services and fulfill legitimate business or legal obligations.

  • Active Accounts: Data is retained for as long as your account remains active.
  • Disconnected Platforms: Cached social media data and access tokens are immediately deleted in compliance with platform Developer Policies.
  • Account Deletion: All associated personal data and user content are deleted or anonymized within 14 days of an approved deletion request, except where limited retention is necessary for backups, security logging, fraud prevention, or legal compliance.

7. Data Security

We use reasonable technical, administrative, and organizational safeguards, including encryption and secure access controls where appropriate, designed to protect your information.

Important Security Information:

  • Engage Max never asks for or stores your social media passwords.
  • All connections are handled via secure OAuth protocols.
  • We use security controls designed to protect authentication credentials, portal access, and connected account access data.
  • We also use administrative, technical, and organizational safeguards designed to limit unauthorized access, misuse, alteration, or disclosure of data.

8. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

  • Access and receive a copy of your personal data.
  • Rectify inaccurate or incomplete information.
  • Request erasure (the "right to be forgotten").
  • Data portability (export your data in machine-readable format).
  • Object to or restrict our processing of your data.
  • Opt out of non-essential marketing emails at any time using the "Unsubscribe" link provided.

To exercise these rights, please email us at reach@engagemax.app.

Account Deletion: You can permanently delete your Engage Max account and all associated data by navigating to Settings > Danger Zone > Delete Account within the Engage Max application. Alternatively, you can request data deletion by emailing us at reach@engagemax.app with the subject 'Data Deletion Request'. We will verify and process your request within 14 days.

9. Social Media & Connected Account Data

Engage Max interacts with third-party social media platforms (such as Facebook, Instagram, and Twitter/X). When you connect an account:

  • We access profile identifiers, organization metadata, and content permissions via authorized APIs.
  • We may process scheduled content, publishing metadata, engagement metrics, and other connected-platform activity necessary to provide dashboard, publishing, analytics, and community management features.
  • Use of connected platform data is also subject to the policies and terms of the respective social media platform.
  • Data Minimization: We only request the minimum permissions required to provide publishing and analytics features.

10. Advertising and Marketing Services

We may share certain customer data (such as email addresses or identifiers) with third-party advertising platforms, including Google Ads, acting as data processors on our behalf, to perform services such as audience matching, conversion tracking, and personalized advertising. We use services such as Google Ads Customer Match to securely upload and match customer data for advertising purposes.

  • Such data is used solely for authorized purposes. Where applicable, this data may be securely hashed before transmission to third-party platforms.
  • Where required by applicable law, we obtain user consent through cookie banners or explicit opt-in mechanisms before processing or sharing data for advertising purposes.
  • All partners are contractually obligated to protect and process data in accordance with applicable privacy laws and platform policies.
  • Google Analytics Data Processing: Google Analytics collects information such as page views, session duration, device type, and referral sources. Google's use of this data is governed by the Google Privacy Policy and Google Analytics Terms of Service.

Users may opt out of personalized advertising by adjusting their cookie preferences or by contacting us.

11. Platform Disconnection & Revocation

You maintain full control over your connected social accounts:

  • In-App: You can disconnect any platform at any time from your Workspace Settings.
  • Platform Side: You can revoke Engage Max's access directly from your account settings on the respective social platform.
  • Effect: Upon disconnection, we stop all data access and delete cached platform-specific data according to our retention policy.

12. Third-Party Services and Links

Our Services contain links to external sites and utilize APIs from social networks. We use Google Analytics (G-BDVQ5VL5X9) & Google Tag Manager for website analytics and performance monitoring. We are not responsible for the privacy practices of these third parties.

13. Children’s Privacy

Our Services are intended for professional use by creators, brands, and teams. We do not direct our Services to children under the age of 16 (or applicable local age requirements).

14. International Users

Elvynox Tech is based in India. Where your information is processed or transferred across borders, we take reasonable steps to ensure it is handled securely.

15. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in practices or for other operational, legal, or regulatory reasons. Material changes will be communicated by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of services after any changes indicates acceptance of the updated Privacy Policy.

16. Contact Us

For any privacy-related inquiries or to exercise your rights, contact us at:

Elvynox Tech

Email: reach@engagemax.app

Registered Sole Proprietorship

India