Privacy Policy

Last updated: March 2026

1. Data Controller

MaxiApps, operating at maxiapps.fr, is the data controller for personal data processed through our checkout service.

2. Data We Collect

We collect minimal data necessary to process your purchase:

• Account identifier — a unique ID provided by the Partner platform to credit tokens to the correct account. We do not know your name or email.
• Transaction data — amount, timestamp, currency, and payment status for order fulfilment and legal compliance.
• Technical data — IP address and browser user-agent, retained for fraud prevention (30 days).

We do not collect your name, email, phone number, or payment card details. All payment information is handled by Stripe.

3. Legal Basis (GDPR Art. 6)

• Contract performance — processing your purchase and delivering tokens.
• Legal obligation — retaining transaction records as required by French accounting law.
• Legitimate interest — fraud prevention and service security.

4. Data Retention

• Transaction records: 7 years (French commercial code, Art. L123-22).
• Technical logs: 30 days.

5. Third Parties

We share data only with:

• Stripe, Inc. — payment processing. Stripe Privacy Policy.
• Partner platform — account identifier and token amount for delivery.

6. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, and port your data. Contact support@maxiapps.fr to exercise these rights. We will respond within 30 days.

7. Contact

Data protection inquiries: support@maxiapps.fr