Privacy and data use

CX Support Max is a private service operated by Rohan Taylor for authorized business inboxes and stores. Contact rhntaylor@gmail.com with access, deletion, or privacy requests.

What the service accesses

After an inbox owner consents, the service reads incoming Gmail messages and conversation history, including sender, recipients, subject, message text, dates, and attachment names. It requests Gmail read and send permissions; it does not delete messages or change their read status. If you enable Gmail star syncing, it also requests Gmail label-editing permission and adds or removes stars only when you choose to do so. Attachment contents are not sent to the AI. Connected Shopify stores provide read-only order and tracking information to match a customer to their order.

How information is used and shared

Message text and relevant verified order details are sent to OpenAI through the owner's connected Codex account to generate support decisions and replies. Gmail delivers replies in the original conversation. Railway hosts the application, database, and private worker. If separately approved, Slack receives the business and store names, order reference, and a contact-filtered summary of supplier questions in the selected vendor channel. Customer email bodies and photos are not included. When the owner connects Dot tracking, a scoped ChatGPT plugin receives only assigned tracking numbers, carriers and tracking URLs. Dot uses its own browser to read the tracking website and returns observed scan events or a blocker. These observations are stored encrypted with source references and check times; website session sign-in is handled separately in Dot. The tracking plugin cannot read inboxes, customer identities, products, store credentials or support policies, and cannot send email or change orders. Data is used only to operate these support features; it is not sold or used for advertising.

Google Workspace data must not be used to train or improve general-purpose AI models. The operator must disable OpenAI model-improvement sharing before processing customer messages and must not submit customer conversations as model feedback. This private worker does not upload environment files. The support playbook provides business-specific instructions and examples; it does not retrain the underlying model.

Opening an inbox can display historical conversations without enrolling them for automatic replies. Manually generated AI drafts are stored in CX Support Max and do not create a Gmail draft or send an email. Daily supplier briefs are prepared from reviewed support cases for the owner to review, edit, and copy for the supplier.

Storage and control

Connection tokens are encrypted in the database. Queue records, message identifiers, case summaries, generated replies, and delivery records are retained for support operations and duplicate prevention until the operator removes them. This version does not automatically expire those records. Access to the dashboard requires the private admin credential.

You can pause inbox processing in the dashboard or revoke Gmail access from your Google Account's third-party connections. Pausing or revoking access does not erase existing application records. Contact the operator to disconnect credentials or request deletion of stored records. Provider backups and provider-managed data follow their own retention terms.

Google Limited Use

CX Support Max's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and Google Workspace API policy, including the Limited Use requirements.

Last updated: November 9, 2026.