SUPERMAXX is a creative studio for brands, operated by 2TINYCREATIONS LLC. This notice covers our public website, supermaxx.ai; the Beta application; and the SUPERMAXX Studio at app.supermaxx.ai, which invited customers use. In plain terms: we collect what we need to run the Beta and make your content, outside services do some of that work for us, and we don’t sell your information.
Applying for the Beta? The application has its own notice, with the details of what the form asks and how we review it: Beta application privacy notice.
SUPERMAXX is operated by 2TINYCREATIONS LLC (“SUPERMAXX”, “we”, “us”). You can reach us at hello@supermaxx.ai.
Cloudflare delivers our public website. Like any website, it receives technical details with each visit, such as your IP address, your browser and the page you asked for, and uses them to deliver the site and protect it from abuse. Cloudflare Web Analytics gives us page-view and page-speed figures for the site. Some of our pages also load a typeface from Google Fonts, so Google receives your IP address when your browser fetches it.
Nothing on the website asks for your details: to apply or sign in, you go to app.supermaxx.ai. Our own code on the website records only error types, never your details. Our cookie policy explains what the site stores in your browser.
Before the Beta application opened, supermaxx.ai had an email waitlist. It’s no longer on the site. If you joined it, we keep the email address you gave on Cloudflare’s infrastructure, to tell you when a Studio opening is available and to share launch updates about SUPERMAXX, as the waitlist said. Our earlier notice also said we might receive basic technical details with your request, such as your approximate country, the page you came from and your browser. The waitlist is separate from Beta applications. To be removed, email us.
The application asks for your name, email, role, business or project name, team size, creative interests and goals, and, if you like, a website or public profile. We record when you applied and that you agreed to be contacted, and our team may add review notes and a status. We use this to review your application, plan onboarding and contact you. Applying doesn’t create an account or sign you up for a newsletter.
Applications are stored in our database at Supabase. Our email provider, Resend, may send you a confirmation, send our review team a copy of your answers and, if we invite you, send your invitation. The Beta application privacy notice has the details.
Your account. It holds your email address and password, which Supabase manages for us. We send one-time codes by email to confirm your address and to reset your password. Supabase may also record technical details of each sign-in, such as your IP address and browser.
Your team. We record your role in each Studio: owner, admin, creator or viewer. When an owner or admin invites someone, we store that person’s email, their role, who invited them and a short note, and create a private link for the inviter to share. We don’t email team invitations.
Brand Brain. It holds what you tell us about your brand, such as what you do, your audience, offer, voice and look, and the claims you make or avoid. If you give us your website or other public pages to read, our server fetches them and keeps text from them to draft facts and research for you to confirm. We keep every version of Brand Brain you save.
Your work. We store the files you upload, such as photos, product images and logos; what you write and direct, such as scripts, instructions and choices; and what the Studio makes for you: photos, videos, voice audio and scripts. We keep them privately for your Studio, with a history of what was requested, when, by whom and what it cost in credits.
AI Creators. AI Creators are original, synthetic people. You describe one in words, including its name, adult age, look and voice, and the Studio generates its portraits, reference views and voice. We keep these with the AI Creator.
Credits and payments. To buy credits, you pay on Stripe’s own checkout page. Stripe collects your card details and email; we never receive your card number. We store what we need to credit your Studio: the pack, amount, currency, Stripe’s reference numbers and the payment status. We also keep a ledger of every credit your Studio receives or uses, and what for.
Security and activity records. We record important actions, such as invitations, deletions, permission changes, credit grants and support visits, with who did them and when. When something goes wrong, our systems send an error report to Sentry. A report contains an event name, a code and sometimes an internal reference number, not your name, email or content. Our hosting providers also keep their own technical logs.
Support. If you email us, we keep the conversation so we can help. To look into a problem, authorized SUPERMAXX staff can open a read-only view of your Studio. They can’t change anything, each visit ends after 30 minutes, and we record who opened it and when.
A Clone is made from a real person’s likeness. To build one, a Studio’s owner or admin uploads photos of the person’s face and body, and of any tattoos or marks. For speaking videos, they also upload a short voice recording. Before the Clone is created, they must confirm that they are this person or their authorized representative, with permission to use the person’s likeness and voice with generation providers. We store that confirmation with the person’s name, who gave it and when.
We use these files only to make that Studio’s content with that Clone. Our AI providers receive the photos and the recording as each creation needs them. To make a Clone speak, fal.ai creates a copy of the voice with MiniMax’s voice model. That copy stays with the provider, and we can’t delete it from our side; if you ask, we’ll ask the provider to remove it.
An owner or admin can withdraw a Clone’s permission at any time. That stops new creation with it; what was already made stays in your Library.
These companies process information for us, each for its part of the service:
Our providers may process information in the United States and other countries. Their own terms and privacy policies also apply to what they handle.
Email hello@supermaxx.ai for any of these. We may need to confirm it’s you. Depending on where you live, you may have other rights over your information; email us to use them.
No system is perfectly secure. If you think your account is at risk, email us right away.
SUPERMAXX is for adults and businesses. Our Terms require you to be at least 18. We don’t knowingly collect information from anyone under 18. If you believe someone under 18 has given us information, email us and we’ll take steps to delete it.
We’ll post any changes to this notice here and update the date at the top.
SUPERMAXX is operated by 2TINYCREATIONS LLC. Questions about this notice or your information: hello@supermaxx.ai. For what our sites store in your browser, read our cookie policy.