Data Retention & Security

Effective date: July 1, 2026 Last updated: July 1, 2026

This Notice summarizes MaxwellX’s intended retention and security practices.

Retention schedule

| Data type | Typical retention | |---|---| | General contact messages | 2–3 years after last interaction | | Team/collaborator applications | Up to 3 years after last interaction | | Accepted collaborator records | Duration of relationship + 7 years, or longer if legally required | | Legal/IP records | As needed for legal, IP, audit, or limitation periods | | Server/security logs | 30–365 days depending on provider and security needs | | Cookie consent records | 12–36 months | | Newsletter records | Until unsubscribed + suppression record | | Accessibility requests | 3 years after resolution | | DMCA notices | 7 years or longer if needed | | Tax/accounting records | As required by law | | Backups | Until overwritten by backup cycle |

Deletion

We may delete or anonymize data when no longer needed. Some information may be retained for legal, security, IP, dispute, audit, or compliance reasons.

Security measures

MaxwellX aims to use reasonable measures such as:

• access controls;
• least-privilege review access;
• secure hosting;
• HTTPS;
• secure form processors;
• spam and abuse prevention;
• backup controls;
• logging and monitoring;
• vendor due diligence;
• confidentiality agreements where appropriate;
• protected channels for patent-sensitive work.

Sensitive submissions

Do not submit sensitive, confidential, patent-sensitive, trade-secret, medical, or controlled information through public forms unless MaxwellX provides a protected intake process.

This document is provided for transparency and general information. It is not legal advice. See the Legal Center for all MaxwellX policies.