Privacy Policy

MaxIMS is operated by Uncomplicated Inc., a Delaware corporation based in Memphis, Tennessee (“we”, “us”).

This policy covers both parts of MaxIMS: this website at max-ims.com, and the MaxIMS app at app.max-ims.com, where customers sign in and keep their inventory and sales records.

• Newsletter: if you subscribe, your email address is sent from your browser to our newsletter provider, Kit (ConvertKit).
• Email: if you write to us, we receive your message and email address.
• App account: when you create an account, sign-in is handled by Auth0, which provides us your email address and name.
• Business records: in the app you enter inventory items, acquisition costs, sales, selling locations, fee rules, payouts, and item photos. You decide what you enter.
• Payments: card details are entered on Stripe’s hosted checkout page. We do not receive or store full card numbers or security codes; we store the card brand and last four digits that Stripe reports on receipts.

When you visit the website or use the app, our hosting and delivery providers (Microsoft Azure and Cloudflare) process your IP address and request details, such as the page requested and your browser type, to deliver the service and protect it from abuse. Our service logs are kept for up to 90 days.

Cookies and analytics depend on your choices, described next.

On your first visit we ask for two separate choices: Analytics and Advertising. You can accept both, reject both, or choose one. Until you choose, and for anything you reject:

• We do not set analytics or advertising cookies, and we do not store campaign information in your browser.
• Google Tag Manager and Google Analytics still load, in Google’s Consent Mode with storage denied. In that mode Google receives limited, cookieless measurement requests (for example, that a page was viewed) without analytics or advertising cookies.

If you allow Analytics:

• Google Analytics may set its cookies (such as _ga) to measure how the site is used.
• We keep a record of the campaign labels (utm_source, utm_medium, utm_campaign, utm_term, utm_content) that brought you to the site, in your browser (maxims_first_touch, maxims_last_touch) and in a cookie the MaxIMS app can read (maxims_attr).

If you allow Advertising:

• Google may set advertising cookies (such as _gcl_au) and use information about your visit to measure whether our ads lead to sign-ups and to show you MaxIMS ads on other sites. If we run Meta (Facebook, Instagram) advertising, Meta may do the same with its cookies (such as _fbp).
• When you select a sign-up link, the ad click identifier in the address you arrived at (gclid or fbclid) is passed to the MaxIMS app so the sign-up can be attributed to the ad. The website does not store it.

Campaign labels in the address you arrived at (utm_ values) are added to sign-up links whatever you choose. They describe the link you clicked, not you, and the website stores nothing when it passes them on.

Necessary storage: we store your choices (maxims_cookie_consent and maxims_ad_consent in your browser, plus the maxims_consent and maxims_ad_consent cookies that the app can read) so we honor them and don’t ask again. These cookies last up to 180 days.

Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as a choice to reject Advertising, whatever is stored.

You can change or withdraw either choice at any time with “Cookie settings” at the bottom of each page. Withdrawing Analytics stops analytics, removes the campaign information we stored, deletes the shared campaign cookie, and expires Google Analytics cookies set on max-ims.com. Withdrawing Advertising expires Google and Meta advertising cookies set on max-ims.com. Withdrawal cannot recall data already sent to Google or Meta.

The app follows the choices you made on max-ims.com. With Analytics, it uses Google Analytics and:

• PostHog for product analytics, including automatically captured interactions, associated with your account identifier, email address, and name.
• Contentsquare for session analytics, which records how you interact with app pages.

With Advertising, the app allows Google’s advertising signals and uses the ad click identifier passed from the website to attribute sign-ups to ads.

The app always uses Honeybadger for error monitoring in the browser and on our servers, because it is necessary to find and fix problems.

• To provide the app: sign-in, storing your records, and calculating fees, profit, and expected payouts from what you enter.
• To manage subscriptions, trials, billing, and refunds, including trial-ending reminder emails.
• To send the newsletter if you subscribed.
• To answer your emails and requests.
• With Analytics, to understand how the website and app are used and which campaigns bring visitors.
• With Advertising, to measure and improve our advertising, including showing MaxIMS ads on other sites.
• To find and fix errors, keep the service secure, and meet legal obligations.

We use these providers to run MaxIMS. They receive only what they need for their service:

• Microsoft Azure — hosting, database, file storage, and logs.
• Cloudflare — website delivery and security.
• Auth0 — sign-in.
• Stripe — payments and subscription billing.
• SendGrid — account and billing email.
• Kit (ConvertKit) — newsletter.
• Google (Tag Manager, Analytics) — website and app analytics, with your Analytics choice.
• PostHog, Contentsquare — app analytics, with your Analytics choice.
• Honeybadger — error monitoring.

Advertising partners (Google, and Meta if we run Meta advertising) receive information about your visit only if you allow Advertising. Some U.S. state laws call this “sharing” for cross-context behavioral advertising or “targeted advertising”. You can opt out at any time by turning off Advertising in Cookie settings or by sending a Global Privacy Control signal.

We do not sell personal information for money.

The website’s home page displays an image served by Unsplash; your browser requests it directly from Unsplash.

We may also disclose information when the law requires it, to protect the rights and safety of our customers or others, or to a buyer or successor if our business is reorganized, merged, or sold, in which case this policy continues to apply to your information.

• Account and business records: kept while your account exists, including after a trial ends or you cancel (your account moves to the free Starter plan and your data is kept), until you ask us to delete them.
• Backups: our database backups are kept for up to five years. Deleted data stays in existing backups until they expire.
• Service logs: up to 90 days.
• Newsletter: kept until you unsubscribe or ask us to delete it.
• Campaign information in your browser: until you withdraw Analytics or clear your browser storage.

To have your account and records deleted, email [email protected] from the email address on your account.

We use measures appropriate to a small software service, including encrypted connections (TLS 1.2 or later) to our app and database, private file storage, and secrets kept in a managed key vault. No method of transmission or storage is completely secure.

Depending on the U.S. state where you live, you may have the right to:

• know what personal information we have about you and get a copy of it;
• correct inaccurate information;
• delete your information;
• opt out of targeted advertising and of the “sale” or “sharing” of personal information; and
• appeal our decision on your request.

To make a request, email [email protected] (deletion requests can also go to [email protected]). We will confirm your request by writing to the email address on your account, and we respond within the time the applicable law allows. An authorized agent may make a request for you with your signed permission. If we deny a request, you can appeal by replying with “Appeal” in the subject line.

We will not treat you differently for exercising these rights.

You can also withdraw website consent with “Cookie settings”, unsubscribe from the newsletter with the link in any newsletter email, and cancel a subscription in the app.

MaxIMS is operated from the United States, and our information is stored and processed in the United States. If you use MaxIMS from outside the United States, your information will be transferred to and processed in the United States.

MaxIMS is for people 18 and older and is not directed to children. If we learn that we have collected information from someone under 18, we will delete it.

If we change this policy, we will update the date at the top of this page. If a change is material, we will also tell account holders by email or in the app before it takes effect.

Uncomplicated Inc., Memphis, Tennessee. Privacy questions and requests: [email protected]. Account deletion and refunds: [email protected]. Product support: [email protected].