Privacy policy
Draft: this text must be reviewed by a lawyer before publication.
1. What data we collect
At registration — the company name and email address; during setup — your name and, optionally, a phone number. During use — the data you enter into the Service: products, sales, customers, suppliers, staff photos and the logo.
At sign-in — the IP address and the browser or device name, so your profile shows where you are signed in.
2. Mobile app
For push notifications the app receives a device token from Firebase Cloud Messaging (Google); we keep it until you sign out of the app.
The camera is used only to scan barcodes. Frames are processed on the device: only the scanned code reaches the Service.
3. Why we need it
To run the Service, sign you in, deliver notifications, provide support and contact you about your subscription.
4. Storage and protection
Each company’s data is stored separately and is available only to its employees according to their access rights. The connection is protected by HTTPS.
5. Sharing with third parties
We do not sell data. To deliver a notification, its text is passed to a delivery service: Firebase Cloud Messaging for push notifications and Telegram if you connected the bot. Otherwise data is shared with third parties only as required by law.
6. Retention
Data is kept while the company uses the Service. After the subscription is suspended it is kept for 6 months and may then be deleted.
A registration whose email was never confirmed is deleted after 7 days. Sign-in records are deleted when you sign out, or within a day after the session expires.
7. Data deletion
The owner can delete the company themselves: Settings → Requisites → Delete company. Deletion happens after 30 days; until then the data is read-only and exportable, and the deletion can be cancelled. Then all company data is deleted, including employees, documents, photos and the archive. See the “Delete account” page for details.
8. Your rights
You can export your data to Excel and PDF, correct it in your profile and settings, and delete the company.
9. Contacts
For questions about data write to: info@maxbox.tj.