Privacy Policy

Last Updated and Effective Date: March 21, 2026

1. Introduction & Scope

Welcome to MaxLig. MaxLig ("we", "us", "our", or the "Company") respects your privacy and is legally committed to protecting your personal data. This comprehensive Privacy Policy outlines the types of information we may collect from you or that you may provide when you visit the website maxlig.com and use the MaxLig mobile application (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies strictly to information we collect through the Services, in email, text, and other electronic messages between you and the Services. It does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from the Services.

2. Data Controller Information

For the purposes of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws, MaxLig acts as the data controller regarding your personal data. Should you have any inquiries regarding this policy, you are encouraged to contact our Data Protection Officer (DPO) at the contact details provided at the end of this document.

3. Categories of Personal Data Collected

Personal data, or personal information, implies any information about an individual from which that person can be identified. It does not include data where the identity has been irreversibly removed (anonymous data). We may collect, use, store, and transfer distinct categories of personal data about you, which we have grouped together as follows:

• Identity Data: includes first name, last name, username or similar identifier, marital status, title, date of birth, and gender.
• Contact Data: includes billing address, delivery address, email address, and telephone numbers.
• Financial Data: We do not store full credit card details on our servers. Financial transactions are securely processed by Google Play Store and Apple App Store gateways.
• Transaction Data: includes details about payments to and from you and other details of subscriptions or services you have purchased from us.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Services.
• Profile Data: includes your username and password (hashed), purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data: includes information about how you use our application, website, and services, such as internal page navigation and interaction time.

4. How Is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

• Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you create an account, subscribe to our service, or request marketing to be sent to you.
• Automated technologies or interactions: As you interact with our website or application, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, mobile tracking SDKs (such as Firebase), and other similar technologies.
• Third parties or publicly available sources: We may receive personal data about you from various third parties, such as analytics providers (e.g., Google Analytics based outside the EU) and advertising networks.

5. Purposes for Which We Will Use Your Personal Data

We will only use your personal data when the governing law allows us to. Most commonly, we will utilize your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing premium AI analysis access).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

Specifically, your data is evaluated to improve the AI architecture (V10 Intelligence Engine) by aggregating generic user behaviour, ensuring that our infrastructure remains highly performant and secure against malicious scraping or bot networks.

6. Disclosures of Your Personal Data

We may have to share your personal data with the parties set out below for the purposes aforementioned:

• Internal Third Parties: Other companies acting as joint controllers or processors who supply IT and system administration services.
• External Third Parties: Service providers acting as processors based worldwide who provide IT and system administration services, such as cloud hosting providers.
• Professional Advisers: Acting as processors or joint controllers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
• Regulators and Authorities: Who require reporting of processing activities in certain circumstances.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

7. International Transfers

Whenever we transfer your personal data out of the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by strictly ensuring that at least one of the following safeguards is implemented: transferring data to countries deemed to provide an adequate level of protection, or using specific contracts approved by the European Commission.

8. Data Security Measures

We have put in place robust and appropriate security measures (including end-to-end encryption frameworks and restrictive firewalls) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a strict business need to know. They process your data strictly upon our instructions and are subject to severe confidentiality obligations.

9. Data Retention Periods

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.

10. Your Legal Rights

Under certain circumstances, you possess specific rights under data protection laws in relation to your personal data. These include the right to:

• Request access: to your personal data (commonly known as a "data subject access request").
• Request correction: of the personal data that we hold about you.
• Request erasure: of your personal data.
• Object to processing: of your personal data where we are relying on a legitimate interest.
• Request restriction of processing: of your personal data.
• Request the transfer: of your personal data to you or a third party (data portability).
• Withdraw consent at any time: where we are relying on consent to process your personal data.

11. Cookies and Tracking Technologies

You can set your browser or mobile device to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Services may become inaccessible or not function properly.

12. Contact Us

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us at:

Email: support@maxlig.com