Privacy Policy

Our customers are property management companies and condominium corporations ("Customers"). Customers use Max Condo Club to operate their buildings, including package logging, key tracking, visitor parking, amenity bookings, service requests, resident communication, and reporting. When a Customer uses our platform, they act as the controller of the personal information processed in their building, and we act as their processor.

When you visit our marketing website or contact our team directly, we act as the controller of your information.

Account information

Names, email addresses, phone numbers, unit numbers, building roles (resident, concierge, manager, board member), and authentication credentials.

Operational records

Records that staff and residents create in the platform: package events, key handovers, visitor parking passes, amenity reservations, service requests, incident reports, daily security reports, pass-on log entries, document uploads, directory entries, surveys, forum posts, and marketplace listings.

Communications

Email, SMS, and in-app notifications sent through the platform, including delivery metadata. We do not read the content of communications except as needed to deliver, secure, and support the service.

Usage data

Log data such as IP address, device type, browser, pages viewed, timestamps, and referring URLs. Used for security, debugging, and product improvement.

Cookies

Strictly necessary cookies for authentication and security. Optional analytics cookies only with consent where required by law.

• Provide, maintain, and improve the Max Condo Club platform.
• Authenticate users and protect accounts.
• Send transactional notifications (package arrivals, service request updates, amenity confirmations).
• Generate building reports and statistics for the Customer.
• Provide customer support and respond to inquiries.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell personal information. We do not use resident data to train third-party advertising models.

Where the GDPR or similar laws apply, we rely on: performance of a contract (delivering the service), legitimate interests (security, product improvement, direct B2B outreach), consent (optional analytics, marketing emails), and legal obligations (tax, accounting, lawful requests).

We share information only as needed to operate the service:

• Customers and their authorized users. Building data is visible to authorized staff and residents of that building based on role.
• Sub-processors. Vetted infrastructure and tooling vendors (cloud hosting, database, email/SMS delivery, error monitoring, customer support).
• Professional advisors. Auditors and lawyers under confidentiality obligations.
• Legal & safety. When required by law, court order, or to protect rights, property, or safety.
• Business transfers. In connection with a merger, acquisition, or asset sale, with continuing protection of personal information.

A current list of sub-processors is available on request.

We retain Customer data for as long as the Customer's account is active and as needed to provide the service. After termination, Customer data is deleted or returned within 90 days unless retention is required by law. Backups are purged on a rolling 35-day cycle. Aggregated, de-identified data may be kept indefinitely.

We protect information with administrative, technical, and physical safeguards including encryption in transit (TLS 1.2+) and at rest, role-based access control, least-privilege internal access, audit logging, automated vulnerability scanning, and regular backups. No system is perfectly secure; we ask Customers to help by choosing strong passwords, enabling multi-factor authentication, and reporting suspected incidents promptly.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. Residents should contact their property manager first, as they control the data in their building. We will assist Customers in responding to verified requests. You may also lodge a complaint with your local data protection authority.

Max Condo Club is operated from Canada. If you access the service from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

The platform is intended for use by adults coordinating a residential building. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. The "Last updated" date at the top indicates when the policy was last revised.

Questions, requests, or complaints? Email privacy@maxcondoclub.com or visit our support page.