Privacy Policy
This policy explains what information MaxUrPoints (operated by Mirza Otovic, sole proprietor, United States) collects through the maxurpoints.com website and the MaxUrPoints web app, and how we use it. Questions: support@maxurpoints.com.
Information we collect
- Account information: your email address and a password, which we store only as a one-way hash (we cannot read it).
- Information you enter: the point balances, card tiers and optional card notes you type into the app. We never ask for bank or card logins, card numbers, or loyalty account passwords.
- Subscription information: your plan, renewal date and payment status. Payments are processed by Stripe; card details go directly to Stripe and are never stored on our servers. Stripe handles payment data under its own privacy policy.
- Technical information: our hosting provider automatically records basic server logs (such as IP address, browser type, pages requested and timestamps) for security and troubleshooting.
- Anonymous destination searches: when you search for or open a destination in the app, we record only the destination country, how it was opened (search or tap) and the time, to power the “Trending searches” list. This record is not linked to your account, email or IP address.
- Emails you send us: if you contact support, we keep the conversation so we can help you.
Cookies and tracking
This marketing website sets no cookies and uses no analytics, advertising or tracking scripts. The web app uses a single essential, HttpOnly session cookie to keep you logged in. We do not use ad trackers or sell data to advertisers.
How we use information
- To provide the Service: calculate your transfer estimates and run your account.
- To process subscriptions and send account, billing and renewal-reminder emails.
- To respond to support requests.
- To keep the Service secure and prevent abuse.
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.
Who we share it with
Only service providers that help us run MaxUrPoints, under their own confidentiality and security obligations: our hosting provider, Stripe (payments), and our email provider (account and billing emails). We may also disclose information if required by law or to protect the rights and safety of our users or the Service.
Retention and deletion
We keep your account information while your account is open. You can ask us to delete your account and associated data at any time by emailing support@maxurpoints.com from the address on your account; we will do so within 30 days, except for records we must keep for tax, accounting or legal reasons (for example, payment records), which Stripe and we retain as required by law.
Your rights
You can request access to, correction of, or deletion of your personal information by emailing support@maxurpoints.com. Depending on where you live (for example, California), you may have additional rights under local law; we will honor them and will not discriminate against you for exercising them.
Security
We use HTTPS, hashed passwords, hashed server-side session tokens and limited data collection. No method of transmission or storage is completely secure, but we work to protect your information.
Children
MaxUrPoints is not directed to children under 13 and we do not knowingly collect their information. Accounts are for users 18 and older.
Where data is processed
MaxUrPoints is operated from the United States, and your information is stored and processed in the United States.
Changes
If we make material changes to this policy we will update the date above and notify account holders by email or in the app.
Contact
MaxUrPoints, operated by Mirza Otovic, United States. Email: support@maxurpoints.com.