At Max, accessible from www.maxhr.io one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that are collected and recorded by Max and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regard to the information that they shared and/or collect in Max. This policy is not applicable to any information collected offline or via channels other than this website.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

How we use your information

We use the information we collect in various ways, including to:

• Provide, operate, and maintain our website
• Improve, personalize, and expand our website
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud
• Log Files

Max follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services’ analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

SMS Handling

Our app requires access to SMS functionality to provide its core features, We handle SMS data in the following manner:

• Collection of SMS Data: Our app may collect and access SMS messages stored on the user’s device. This includes incoming messages.
• Purpose of SMS Data Usage: The SMS data collected by our app is used solely for the purpose of providing messaging functionality and enhancing user experience.
• Storage and Security: We take appropriate measures to securely store and protect the SMS data collected by our app. This includes implementing encryption, access controls, and other security measures to prevent unauthorized access or disclosure.
• Third-Party Access: We do not share SMS data collected by our app with third parties, except as required by law or with the user’s explicit consent.
• User Consent: By using our app and granting permission to access SMS functionality, users consent to the collection and usage of their SMS data as outlined in this privacy policy.
• User Controls: Users have the option to revoke access to SMS functionality at any time through the device settings. However, doing so may limit certain features or functionalities of the app.
• Data Retention: We retain SMS data only for as long as necessary to fulfill the purposes outlined in this privacy policy. Users may request the deletion of their SMS data by contacting us.
• Updates to Privacy Policy: We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Users will be notified of any significant changes to this policy.

Cookies and Web Beacons

Like any other website, Max uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of Max.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on Max, which are sent directly to users’ browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that Max has no access to or control over these cookies that are used by third-party advertisers.

Third Party Privacy Policies

Max’s Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers’ respective websites.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

Max does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Compliance, Privacy, and Security at Max

At Max, we value your privacy and are dedicated to maintaining the highest standards of compliance and security. Below, we outline how we address privacy concerns and adhere to relevant laws and regulations in the United Arab Emirates.

Protecting Your Privacy

Max considers the protection of your personal information as one of our core principles. We believe in providing you with complete control over your data and respect your right to decide when you want to share information with us.

• Time Tracking Control: You have the autonomy to determine when to track your time using Max. We ensure that you receive notifications when time tracking starts.
• Access to Tracked Data: You have full access to the data collected through Max. In the event of accidental tracking of non-work-related tasks, you can delete the data directly from your activity dashboard, even without admin permissions.

Transparency and Consent

Transparency, access, and control are fundamental principles guiding our privacy practices. We are committed to being transparent about how Max functions and how your data is handled.

Informed Usage: We highly recommend that you inform your employees or contractors about the use of Max before they download the app. This approach fosters transparency and allows them to fully understand the software’s functionality.

Legal Compliance: Max operates within the bounds of the law and does not violate any privacy guidelines and regulations when used appropriately. We do not track your activity without your explicit consent, and the security of your data is of paramount importance to us.

Please Note: The information provided in this section is not legal advice. If you have specific concerns or questions regarding your business and its employees, we recommend consulting with your legal counsel.

Employee Monitoring Laws in the United Arab Emirates
In the United Arab Emirates, employee monitoring is subject to relevant laws and regulations. As an organization using Max, it is essential to adhere to these laws and obtain proper consent from your employees.

Max adheres to the principles of the General Data Protection Regulation (GDPR). We respect your consent and ensure that you have full access and control over your data.

User Consent: We never track your activity without your knowledge and explicit consent.

Access to Collected Data: In compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Max ensures that employees have full access to their tracked time and activity reports.

Best Practices for Employee Monitoring

1. Obtain Consent:

We recommend obtaining written consent from all team members before monitoring their devices, even if they are company-provided.

2. Transparency and Clarity:

Clearly communicate the purpose and scope of monitoring to your team, ensuring they understand its impact on their work.

3. Respect Boundaries:

Max will only collect the data agreed upon, respecting the specified boundaries.

Max relies on consent as a lawful basis for processing, and we fulfill all consent requirements. The language used when requesting consent is clear and aligned with the purpose of data usage. Max provides a convenient mechanism for individuals to withdraw their consent.

Max ensures that its privacy policy and the data subjects’ rights are communicated clearly in unambiguous terms.

Max adheres to cross-border data transfer regulations under the PDPL.

Max maintains detailed files and contingency plans for all jurisdictions where data collected might need to be transferred to ensure compliance.

Disclaimer

This privacy policy section is not professional legal advice. For comprehensive legal guidance, please refer to your country’s policies or consult with dedicated legal counsel.

Is Max Compliant?

Yes, Max adheres to industry standards and compliance requirements:

• HIPAA Compliance: Max is HIPAA-compliant, allowing teams in the healthcare industry to blur screenshots for the protection of medical records and confidential patient information.
• GDPR Compliance: Max fully complies with the GDPR, ensuring user consent is obtained before data collection and providing access, deletion, and export options for user data.
• SOC-2 Compliance: Max is SOC2 Type 2 compliant, demonstrating our commitment to robust data protection and strong security measures to prevent unauthorized access.

Max is committed to complying with the UAE Personal Data Protection Law. We continually strive to align our practices with the latest regulations and provide our users with the utmost privacy and security. Please note that the PDPL is an evolving law, and Max will keep its privacy policy updated to reflect any future changes.