Privacy Policy

Our customers are property management companies and condominium corporations ("Customers"). Customers use Max Condo Club to operate their buildings, including package logging, key tracking, visitor parking, amenity bookings, service requests, resident communication, and reporting. When a Customer uses our platform, they act as the controller of the personal information processed in their building, and we act as their processor.

When you visit our marketing website or contact our team directly, we act as the controller of your information.

Account information

Names, email addresses, phone numbers, unit numbers, building roles (resident, concierge, manager, board member), and authentication credentials.

Operational records

Records that staff and residents create in the platform: package events, key handovers, visitor parking passes, amenity reservations, service requests, incident reports, daily security reports, pass-on log entries, document uploads, directory entries, surveys, forum posts, and marketplace listings.

Communications

Email, SMS, and in-app notifications sent through the platform, including delivery metadata. We do not read the content of communications except as needed to deliver, secure, and support the service.

Usage data

Log data such as IP address, device type, browser, pages viewed, timestamps, and referring URLs. Used for security, debugging, and product improvement.

Cookies

Strictly necessary cookies for authentication and security. Optional analytics cookies only with consent where required by law.

Mobile app

The iOS and Android apps may access the device camera for package label photos, optional biometric unlock (processed on-device only; never sent to our servers), push notification device tokens (Firebase Cloud Messaging / Apple Push Notification service), and coarse location when an administrator uses the map picker. Card payments for amenity fees are entered through Stripe; we receive payment status, not full card numbers.

AI-assisted features

With your explicit consent in the native iOS or Android app (recorded on your account when you sign up, sign in, or enable the feature), package label photos and Ask AI chat messages are sent to our servers and then to OpenRouter, which routes them to an AI model provider. The desktop web app does not show these consent prompts. OpenRouter is configured with provider data collection disabled. You can withdraw consent in Profile on the native app.

• Provide, maintain, and improve the Max Condo Club platform.
• Authenticate users and protect accounts.
• Send transactional notifications (package arrivals, service request updates, amenity confirmations).
• Generate building reports and statistics for the Customer.
• Provide customer support and respond to inquiries.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell personal information. We do not use resident data to train third-party advertising models.

Where the GDPR or similar laws apply, we rely on: performance of a contract (delivering the service), legitimate interests (security, product improvement, direct B2B outreach), consent (optional analytics, marketing emails), and legal obligations (tax, accounting, lawful requests).

We share information only as needed to operate the service:

• Customers and their authorized users. Building data is visible to authorized staff and residents of that building based on role.
• Sub-processors. Vetted infrastructure and tooling vendors (cloud hosting, database, email/SMS delivery, error monitoring, customer support).
• Professional advisors. Auditors and lawyers under confidentiality obligations.
• Legal & safety. When required by law, court order, or to protect rights, property, or safety.
• Business transfers. In connection with a merger, acquisition, or asset sale, with continuing protection of personal information.

A current list of sub-processors is available on request.

We retain Customer data for as long as the Customer's account is active and as needed to provide the service. After termination, Customer data is deleted or returned within 90 days unless retention is required by law. Backups are purged on a rolling 35-day cycle. Aggregated, de-identified data may be kept indefinitely.

We protect information with administrative, technical, and physical safeguards including encryption in transit (TLS 1.2+) and at rest, role-based access control, least-privilege internal access, audit logging, automated vulnerability scanning, and regular backups. No system is perfectly secure; we ask Customers to help by choosing strong passwords, enabling multi-factor authentication, and reporting suspected incidents promptly.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. Residents should contact their property manager first, as they control the data in their building. We will assist Customers in responding to verified requests. You may also lodge a complaint with your local data protection authority.

We may process personal information in the United States and in other countries where we or our service providers operate. Where required by law, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses.

The platform is intended for use by adults coordinating a residential building. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. The "Last updated" date at the top indicates when the policy was last revised.

Max Condo Club is operated by UP Entertainment Group Ltd. (operating as Max Condo Club). Questions, requests, or complaints? Email support@maxcondoclub.com or privacy@ privacy@maxcondoclub.com. For product help, visit our support page.