Privacy Policy
How we collect, use, and protect your personal information
Introduction
MAXYMIZE BUSINESS ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BYOURIT service. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our Service, you consent to the data practices described in this policy.
Information We Collect
We collect information you provide directly to us: Personal Information: • Name and email address • Birth dates (yours and your partner's) • Relationship type • Payment information (processed securely by Stripe) Automatically Collected Information: • Device information (browser type, operating system) • IP address and general location • Usage data (pages visited, time spent on site) • Cookies and similar technologies You are not required to provide your real name, nor real names for the people you compare with: pseudonyms work just as well. Birth dates are used only to compute the cycles, and the Service does not verify that they are authentic.
How We Use Your Information
We use your information to: • Provide and deliver our compatibility analysis services • Process payments and send transaction confirmations • Send you reports and service-related communications • Respond to your inquiries and provide customer support • Improve our services and develop new features • Comply with legal obligations We do not sell your personal information to third parties.
Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely using: • Encrypted database connections (SSL/TLS) • Secure cloud infrastructure • Regular security audits • Access controls and authentication All data, including birth dates, is protected by infrastructure-level encryption at rest and TLS encryption in transit.
Data Retention
We retain your personal data for as long as necessary to: • Provide our services to you • Comply with legal obligations • Resolve disputes • Enforce our agreements Saved readings (personal biorhythm and compatibility reports) are kept for 24 months from the date they are created, then deleted automatically. The calculation remains reproducible at any time from the date of birth. You may request deletion of your data at any time by contacting us. Upon request, we will delete your personal data within 30 days, unless we are required by law to retain it.
Your Rights (GDPR)
Under the GDPR, you have the following rights: • Right of Access: Request a copy of your personal data • Right to Rectification: Request correction of inaccurate data • Right to Erasure: Request deletion of your data ("right to be forgotten") • Right to Restrict Processing: Limit how we use your data • Right to Data Portability: Receive your data in a portable format • Right to Object: Object to certain processing of your data • Right to Withdraw Consent: Withdraw consent at any time To exercise these rights, contact us at info@byourit.app.
Cookies
We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies help us: • Remember your preferences • Understand how you use our Service • Improve your experience • Provide relevant content You can control cookies through your browser settings. For more details, see our Cookie Policy.
Third-Party Services
We use trusted third-party services to operate our Service: • Stripe: Payment processing (certified under the EU-US Data Privacy Framework) • Convex: Database and backend services (Standard Contractual Clauses) • Netlify: Website hosting (certified under the EU-US Data Privacy Framework) • Resend: Transactional email delivery • Railway: Hosting of our biorhythm calculation engine • Anthropic PBC: provider of the language model that adapts the reading texts (see the Artificial Intelligence section). The call is direct: there are no intermediaries between us and the provider • inth (c15t): Consent management; consent records are stored on EU servers (Ireland) • Google Tag Manager / Google Analytics 4: Analytics, loaded only after your consent • Meta Pixel: Advertising measurement, loaded only after your consent • PostHog (EU): Product analytics; uses cookies only after your consent These providers have their own privacy policies and are GDPR-compliant. We ensure appropriate data processing agreements are in place with all third-party processors, relying on EU adequacy decisions (Data Privacy Framework) or Standard Contractual Clauses for transfers outside the EU.
Artificial Intelligence
The content of the readings is written by a human author and kept in an editorial archive. An artificial intelligence model adapts it to the form and to the context indicated by the user, and generates some accessory elements: title, trend note, practical advice and short tips. Whenever the text you see was produced this way, the page says so: you will find the statement below the reading, and the marking is also written into the metadata of the images you can export. If the model does not respond, the reading is served straight from the author's archive and in that case nothing is generated: the statement changes accordingly. We send the model only the author's text to be adapted, the numeric cycle values and the non-identifying answers to the questionnaire that precedes the report. We never send your name, your email or your date of birth. Questionnaire answers containing health references are discarded before sending and are not stored. The Service does not make automated decisions that produce legal or similarly significant effects on you (Article 22 GDPR). Cycle values and compatibility scores are computed with deterministic mathematical formulas from the birth dates you enter.
International Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers, including: • Standard Contractual Clauses approved by the European Commission • Adequacy decisions where applicable • Binding Corporate Rules where appropriate
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: Email: info@byourit.app Website: https://byourit.app/contact Data Protection Officer: info@byourit.app