1Scope of this Privacy Policy

CubeZeroApps ("we", "us", "our") operates MaxLoader (the "Service"). This Privacy Policy explains what information the Service handles, what reaches us, what reaches third parties, how long it is kept and the choices you have. It applies to the MaxLoader website and to any account you hold with us.

We are the controller of the personal information described here. Terms used in this policy have the meanings given in our Terms of Service. This policy explains how we handle information when you use the Service.

2Information you enter stays on your device

MaxLoader performs its calculations in your browser. The cargo list, the vehicle specification, the weights, the dimensions and the resulting load plan are processed on your own device. Unless you are signed in to an account, they are not transmitted to us, we cannot see them, and we hold no copy of them.

While you are signed in on a plan that keeps a calculation history, each calculation you run is added to it, up to the number your plan keeps, so that you can open it again later: what you entered, and a short summary of the result, such as the jurisdiction, the vehicle, the verdict and the gross weight. Vehicle and item templates you save are kept with your account in the same way. You can delete any calculation, or the whole history, from the history page at any time. To use the planner without keeping a history, log out.

The Service does not remember your settings from one visit to the next. Within a tab, your browser's own page history keeps what you entered, on your own device, so that the Back button shows it again. Closing the tab removes it. We do not read it and it never reaches our servers.

The Pallet Calculator's Open in the Load Planner opens the planner as a new page. To carry the pallets to that page, your browser keeps a copy of them in its session storage for that tab, which the browser discards when the tab is closed. The copy is never placed in the page's address, so it does not appear in server logs or in the usage statistics.

3Account information

If you create an account, we collect and store the information needed to run it: your email address, a hashed and salted form of your password, the display name you choose, and optionally your company name. If you subscribe, we also hold a record of your subscription, its status and its renewal date.

We do not store your card details, and never see them. Payment is handled by Paddle, our reseller and merchant of record, which receives your payment information directly. We receive only the identifiers of your Paddle customer record and subscription, the plan you subscribe to and how often it is billed, its status, and the date it renews or ends.

Your calculation history, the vehicle and item templates you save, and any other content you save to your account, is stored so that we can show it back to you. We do not use it for any other purpose, we do not sell it, and we do not use it to train anything.

Your account also has a backup code, which lets you set a new password if you forget yours. We keep it in forms we cannot read: a hashed and salted form, to check a code you give us; a copy encrypted with a key that only your password opens; and, for each browser you are logged in on, a copy encrypted with a key held only in that browser's session cookie, so that the Account page can show it to you.

To stop passwords and backup codes being guessed, we record each failed attempt to sign in or to reset a password with a backup code, with the email address entered and the network address it came from, and each attempt to create an account, with the network address it came from, together with the time. To limit how fast an account can fill our storage or test email addresses, we also record the time of each calculation and template it saves and each change of its email address. These records are used only to limit repeated attempts and are deleted within a day.

The legal basis for processing account information is the performance of our contract with you. Where you are a consumer in the European Economic Area or the United Kingdom, providing this information is a contractual requirement: we cannot give you an account without it, although you are free to use MaxLoader without one.

4Log data

Like almost every website, MaxLoader is delivered by a hosting and content delivery provider that records a standard server log entry each time your browser requests a file. That entry includes your device's Internet Protocol ("IP") address, the date and time of the request, the file requested, the response status, the referring page if your browser sends one, and your browser's user-agent string, which identifies the browser and operating system.

The typefaces the page is set in are served from the same host as the page itself, so displaying it sends no request to anyone else.

We use log data to deliver the page, keep the Service available, diagnose faults and detect abuse. An IP address can identify a person indirectly, so we treat log data as personal information rather than describing it as anonymous. We do not use it to build a profile of you, and we do not try to link it to anything you enter. The legal basis is our legitimate interest in operating and securing a service we make available to the public, balanced against your interest in not being tracked.

5Usage statistics

To understand how the Service is used, we count page views and two actions, calculating a load plan and exporting a file, using Umami, an analytics service designed not to track individuals. It sets no cookies and stores nothing on your device. For each page view it receives the address of the page without its query string, the title of the page, the referring page, your browser, operating system, device type, screen size and language, and your country, which it derives from your IP address. For an action it also receives which action it was and a few details of it: the jurisdiction and vehicle selected, how many items were listed and loaded, the kind of verdict, and the file format. It never receives the cargo list, the vehicle figures or anything else you type into the tool.

We look at these statistics in aggregate, we do not use them to identify you or to follow you across other sites, and if your browser sends a Do Not Track signal your visit is not counted at all. Because an IP address reaches the statistics service in the course of a request, we treat these statistics as personal information on the same terms as log data. The legal basis is our legitimate interest in understanding and improving a service we make available to the public, balanced against your interest in not being tracked.

6Cookies and local storage

Cookies are small files placed on your device. The same rules apply to anything else stored on or read from your device, including local storage and similar identifiers. These are what the Service uses; the usage statistics described above add nothing to this list, because they store nothing on your device:

Every entry above is strictly necessary to give you the service you asked for, and none is used to track you, so the Service asks for no consent to them and shows no cookie banner. The Service uses no advertising or tracking cookies.

How to refuse. Every current browser lets you block or delete cookies and site data, for all sites or for this one alone. Blocking storage will not stop MaxLoader working, though you will not be able to stay signed in and the tool will forget your preferences between visits.

7Third parties and recipients

We do not sell or share personal information. These are the parties that receive information in the course of running the Service, each acting under its own policy:

• Our hosting and content delivery provider, which processes log data and stores account data on our instructions;
• Paddle.com, our reseller and merchant of record, which sells you a subscription, takes payment, collects the tax due on it and keeps the record of it. It receives your email address from us and your payment details from you directly, and acts as its own controller for them. See the Paddle privacy policy;
• Umami, which provides the usage statistics described above and processes them on our instructions. See the Umami privacy policy;
• a professional adviser, or a public authority, where we are required by law to disclose information or where disclosure is necessary to establish or defend a legal claim.

If our business is transferred to a successor, information held at the time may transfer with it. We would publish that change before it took effect.

8How long we keep information

Log data is kept no longer than 90 days, after which it is deleted or aggregated beyond identification. Usage statistics are kept no longer than 24 months.

Account information and saved content are kept for as long as your account exists. When you delete your account, they are deleted within 30 days, together with the identifiers of your Paddle customer record and subscription. Paddle keeps its own record of your subscription and payments for as long as tax and accounting law requires it to, under its own privacy notice. We may retain the minimum needed to establish or defend a legal claim, for as long as that claim could be brought.

Correspondence you send us is kept for two years from the last message in the exchange. Anything held in your browser's storage stays there until you clear it, and is not ours to delete.

9Transfer of personal information

We are established in South Korea and our service providers operate globally, so information described in this policy may be processed in South Korea, the United States, the European Economic Area and elsewhere. Wherever it goes, it is handled under this policy.

Where information is transferred out of the European Economic Area or the United Kingdom to a country without an adequacy decision, the transfer is made under the European Commission's Standard Contractual Clauses, the United Kingdom's International Data Transfer Addendum, or another approved mechanism. You may ask us for a copy of the safeguards relied on by writing to cubezeroapps@gmail.com.

10Security

The Service is delivered over HTTPS. Passwords are stored hashed and salted, never in a form we can read. Access to account data is limited to what is needed to run the Service. We do not hold card details at all.

Where the law requires us to notify a personal data breach, we will do so: to the relevant supervisory authority without undue delay and, where the breach is likely to result in a high risk to you, to you as well.

No method of transmission over the internet or of electronic storage is completely secure, and we do not claim otherwise.

11Children's privacy

MaxLoader is a tool for commercial road transport and is not directed at children. We do not knowingly collect personal information from children, and an account may only be created by someone aged 18 or over. If you believe a child has given us personal information, write to cubezeroapps@gmail.com and we will delete it.

12Your rights

Depending on where you live you have some or all of the following rights over personal information we hold about you: to be told what we hold and to receive a copy of it; to have inaccurate information corrected; to have information erased; to have our processing restricted; to object to processing carried out on the basis of a legitimate interest; to receive information you gave us in a portable form; to withdraw a consent you have given, without that affecting anything done before you withdrew it; and not to be treated differently for exercising any of these rights.

If you have an account, you can view, correct, export and delete most of what we hold from your account settings. For anything else, write to cubezeroapps@gmail.com. We do not charge for this, and we will respond within one month.

If you are in the European Economic Area or the United Kingdom, you may complain to your local supervisory authority, or to the Information Commissioner's Office in the United Kingdom. We would rather you told us first, at cubezeroapps@gmail.com, so that we have a chance to put it right.

If you are in California, the categories of personal information we collect are identifiers, in the form of your email address and the IP address in a log entry; commercial information, in the form of your subscription record; and internet activity information, in the form of the file requested, the referrer and the user-agent string, and the page views and actions counted as usage statistics. We collect them from you and from your browser, for the purposes described above. We do not sell or share personal information, as California law defines those terms, and we do not use it for cross-context behavioral advertising. You have the right to know, delete and correct, and not to be treated differently for exercising any of them, and you may use an authorized agent.

13Links to other sites

The Service contains links to sites we do not operate, including the official legal texts it cites. Following such a link takes you to that site, which is governed by its own privacy policy. We have no control over those sites and take no responsibility for their content or their practices. We strongly advise you to read the privacy policy of every site you visit.

14Changes to this Privacy Policy

We may update this policy from time to time. The date it takes effect and the date it was last changed are shown at the top of this page.

If a change is material, we will publish the revised policy here with a new effective date at least 30 days before it takes effect, so that you can stop using the Service if you do not accept it. You are advised to review this page periodically.

We will not apply a materially different use to personal information already collected without first obtaining your express opt-in consent.

15Contact us

If you have any questions about this Privacy Policy, or wish to exercise any right described in it, contact us at cubezeroapps@gmail.com.