Service providers
The companies that help Maxx run, what each one receives, and when.
Who receives what
| Provider | What it does | What it receives | When |
|---|---|---|---|
| PayPal | Payments, refunds, seller payouts, subscriptions | Order amounts, payer identity as PayPal sees it, seller payout email | Whenever payments are on |
| Nebius | AI models for screenshots, matching and negotiation | Screenshots you scan; negotiation prompts without buyer identity | Live mode only |
| Tavily | Searching for comparable prices | Product details from a scan | Live mode only |
| Email provider (SMTP) | Sign-in links, codes and alerts | Your email address and message | Always |
| Cloud hosting and database | Runs the service and stores data | Everything described in the Privacy Policy, encrypted where stated | Always |
| Cloudflare Turnstile | Bot check on forms | Browser signals and your network address | If enabled |
| Google, Apple, Microsoft, GitHub | Sign-in, if you choose it | What the provider releases to Maxx: an id, email and name | If you use them |
| Have I Been Pwned | Check a new password against breaches | The first five characters of a password hash only | When you set a password |
| An Ethereum node provider | Reads blockchain data to confirm PYUSD payments | A transaction hash | If PYUSD is enabled |
We choose providers carefully, sign data processing agreements where the law requires them, and tell you here before adding a provider that receives personal data.