MaxApp

Privacy Policy

MaxApp and the Real Detailers Meta app. Last updated 16 September 2026.

Who this applies to

MaxApp is a business assistant for car detailing and other local service businesses, operated by Mason's Car Care Ltd in Queenstown, New Zealand. Businesses that use MaxApp ("clients") connect their own Facebook Page and ad account through our Meta app, "Real Detailers", so that their lead form enquiries reach them and their ads can be managed. This policy covers the people who submit those enquiries, and the clients themselves.

What data we collect

When a person submits a Meta lead form for one of our clients, we receive the answers they voluntarily gave, typically:

From clients who connect Facebook we receive their Page name and ID, a Page access token, their ad account ID, and the lead forms, ads and ad performance data on those assets. We do not collect browsing data, cookies for tracking, location beacons, facial imagery, or any data from people who have not submitted a form.

How we use the data

We do not sell data, share it with third parties for their own marketing, or use one client's data for another client.

How we store the data

Data is stored in a PostgreSQL database hosted on Railway (United States region) with row-level tenant isolation, encrypted in transit and at rest. Access tokens are encrypted before storage. Access is restricted to authenticated systems. We keep a client's data while their account is active and for 90 days after it closes, then delete it permanently. Daily encrypted backups are kept for 90 days.

Your rights and data deletion

If you submitted a form and want to see, correct or delete your data, or you are a client who wants your connected Facebook data removed, follow the steps at app.maxapp.nz/data-deletion or email privacy@maxapp.nz. We action requests within 10 working days.

Meta integration

Our Meta app integrates through the Meta Graph API with these permissions: pages_show_list and pages_read_engagement to let a client pick and verify their Page, leads_retrieval to receive lead form submissions for that Page, ads_management to create and manage campaigns in the client's own ad account, and business_management to accept Pages and ad accounts a client shares with our business portfolio. A client can disconnect at any time from their Facebook settings (Settings, Business integrations) or by asking us, which revokes our access.

Requests from public authorities

If a government agency or court asks us for personal data, we review whether the request is lawful before responding, we disclose only the minimum the request lawfully requires, and we keep a record of each request, our response and the legal basis. We have received no such requests to date.

Contact

Privacy questions or requests: privacy@maxapp.nz
Mason's Car Care Ltd, 175 Glenda Drive, Frankton, Queenstown 9300, New Zealand