Privacy Policy

• Name
• Email address
• Phone number
• Access credentials (login and authentication)

• IP address
• Device identifiers
• Operating system and version
• Usage data and interactions with the application

• Device operating data
• Status, commands and automations
• Operational logs
• Device identifiers (device_id)

Max Connect uses third-party services to enable its features. We integrate with the Tuya platform, which may collect and process data related to connected devices, including technical device information, connection data and operational logs.

We recommend reading Tuya's privacy policy for further information.

If you choose to link your Max Connect account to a voice assistant, we exchange data with the corresponding provider — Google LLC (Google Home) or Amazon.com, Inc. (Amazon Alexa) — solely to enable voice control of your devices.

Linking is optional, is always initiated by you, and can be undone at any time in the voice assistant application. If you never link an account, no data is shared with these providers.

• Operation and functioning of the application
• Connecting and managing IoT devices
• Communicating with devices over the MQTT protocol
• Authentication and security
• Sending notifications and alerts
• Enabling voice control through linked voice assistants (Google Home, Amazon Alexa)
• Continuous improvement of the user experience

Under the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018):

• Performance of a contract
• Compliance with a legal obligation
• Legitimate interest
• User consent, where applicable

Your data is not sold. We may share information with:

• Infrastructure providers (hosting, database)
• Messaging and communication services (MQTT brokers)
• The Tuya platform, for device operation
• Voice assistant providers, when you link your account (see below)
• Legal authorities, when required

When you link your Max Connect account to Google Home or Amazon Alexa, the following is shared with the respective provider:

• Device list: name, type, category and room
• Device state: on/off, current temperature, target temperature (setpoint) and operating mode
• A technical identifier for each device (device_id)

In return, we receive the control commands you issue by voice or through the assistant's application, and we forward them to your devices. We do not share your name, email address, phone number or password with these providers.

Data handling by these providers is governed by their own policies: Google Privacy Policy and Amazon Privacy Notice.

We adopt appropriate technical and organizational measures, including:

• Encryption (HTTPS, TLS)
• Secure authentication (tokens, JWT)
• Access control
• Security monitoring

Even so, no system is completely secure.

The application uses the MQTT protocol for real-time communication with devices. During this process:

• Temporary tokens may be generated for authentication
• Telemetry data may be transmitted
• Communications are protected by encryption and authentication

• Location (device setup)
• Network/Wi-Fi access (connectivity)
• Camera (QR code scanning)
• Notifications (operational alerts)

These permissions are used exclusively for the operation of the application.

Under Law No. 13.709/2018, you have the following rights:

• Confirm that your data is being processed
• Access your personal data
• Correct incomplete, inaccurate or outdated data
• Request anonymization, blocking or deletion of unnecessary data
• Request deletion of your account and personal data
• Withdraw consent

• For as long as the account remains active
• For as long as necessary to provide the services
• To comply with legal obligations

Some of the services we use may store data outside Brazil. In particular, the Tuya platform, of Chinese origin, may process IoT device data on servers located outside the national territory. Likewise, linking your account to Google Home or Amazon Alexa involves transferring device data to infrastructure operated by those providers outside Brazil.

In such cases, we adopt measures to ensure compliance with the LGPD and adequate levels of protection, pursuant to article 33 of Law No. 13.709/2018, including contractual clauses and other safeguards recognized by the ANPD (Brazilian National Data Protection Authority).

The application is intended exclusively for users aged 18 or older and does not knowingly collect data from minors.

This policy may be updated at any time. We recommend that you review this document periodically.