1. Introduction

This Cookie Policy explains how Maxxo.ai ("Maxxo", "we", "our", "us") uses cookies and similar tracking technologies when you visit our website (maxxo.ai) and web application (app.maxxo.ai).

We comply with the UK Privacy and Electronic Communications Regulations (PECR) and the UK General Data Protection Regulation (UK GDPR) in our use of cookies.

By using our cookie consent controls, you can choose which non-essential cookies you accept. We will not place non-essential cookies on your device without your consent.

2. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.

Similar technologies include:

Local storage: Data stored in your browser that persists until cleared

Session storage: Data stored temporarily for a single browser session

Pixels/beacons: Small images that track page views and user behaviour

This policy covers all these technologies, referred to collectively as "cookies."

3. How We Use Cookies

We use cookies for the following purposes:

Essential operation: To make our website and application function correctly

Authentication: To keep you logged in and secure your session

Preferences: To remember your settings and choices

Analytics: To understand how visitors use our website so we can improve it

Performance: To monitor and improve website speed and reliability

4. Cookie Categories and Consent

4.1 Strictly Necessary Cookies (No Consent Required)

These cookies are essential for the website to function. They enable core functionality such as security, authentication, and accessibility. You cannot opt out of these cookies as the website cannot function properly without them.

Legal basis: Legitimate interest — these cookies are strictly necessary for the service you have requested.

4.2 Analytics Cookies (Consent Required)

These cookies help us understand how visitors interact with our website by collecting anonymous, aggregated information. They help us improve our website and your experience.

Legal basis: Consent — we only set these cookies after you have given consent through our cookie banner.

4.3 Functional Cookies (Consent Required)

These cookies enable enhanced functionality and personalisation beyond what is strictly necessary, such as remembering non-essential preferences.

Legal basis: Consent — we only set these cookies after you have given consent through our cookie banner.

5. Cookies We Use

5.1 Strictly Necessary Cookies

Cookie Name	Provider	Purpose	Duration
sb-access-token	Supabase	Authentication token for logged-in users	Session
sb-refresh-token	Supabase	Refreshes authentication token	7 days
sb-auth-token	Supabase	Contains authenticated session	Session
cookie_consent	Maxxo	Stores your cookie consent preferences	1 year
__vercel_live_token	Vercel	Required for application hosting	Session

5.2 Analytics Cookies

These cookies are only set if you consent to analytics cookies.

Cookie Name	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique users	2 years
_ga_*	Google Analytics	Maintains session state	2 years
_gid	Google Analytics	Distinguishes unique users	24 hours
_gat	Google Analytics	Throttles request rate	1 minute

5.3 Functional Cookies

These cookies are only set if you consent to functional cookies.

Cookie Name	Provider	Purpose	Duration
theme	Maxxo	Remembers your display preferences	1 year
dismissed_banners	Maxxo	Remembers dismissed notifications	30 days

Note: This list reflects cookies in use at the time of publication. We update this list as our website evolves. The cookie consent tool on our website provides the most current information.

6. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. The third parties we use include:

Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect anonymous information about page views, traffic sources, and user behaviour.

Google may transfer data to servers outside the UK. Google is certified under approved data transfer mechanisms.

Opt-out: tools.google.com/dlpage/gaoptout

Vercel

Our website is hosted on Vercel. Vercel may use cookies for performance monitoring and security.

Supabase

Our application uses Supabase for authentication and database services. Supabase cookies are strictly necessary for the application to function.

Stripe

If you make a payment, Stripe may set cookies for fraud prevention and payment processing. These are strictly necessary for payment functionality.

7. Managing Your Cookie Preferences

7.1 Our Cookie Consent Tool

When you first visit our website, you will see a cookie banner that allows you to accept or reject non-essential cookies. You can change your preferences at any time by clicking "Cookie Settings" in the footer of our website.

Your consent preferences are stored in the cookie_consent cookie on your device.

7.2 Browser Controls

You can also control cookies through your browser settings. Most browsers allow you to:

View what cookies are stored

Delete individual cookies or all cookies

Block cookies from specific websites

Block all third-party cookies

Block all cookies (note: this may break website functionality)

How to manage cookies in common browsers:

Google Chrome: Settings → Privacy and Security → Cookies and other site data

Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data

Safari: Preferences → Privacy → Manage Website Data

Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data

7.3 Opting Out of Google Analytics

You can opt out of Google Analytics specifically by:

Using our cookie consent tool to reject analytics cookies

Installing the Google Analytics Opt-out Browser Add-on

Enabling "Do Not Track" in your browser (we honour this signal)

7.4 Impact of Rejecting Cookies

If you reject or block cookies:

Strictly necessary cookies: Cannot be blocked; doing so via browser may prevent the website from functioning

Analytics cookies: We will not collect analytics data about your visit

Functional cookies: Some preferences and enhanced features may not work

8. Cookies in Our Web Application

When you log in to the Maxxo application (app.maxxo.ai), additional cookies are used for authentication and session management. These are strictly necessary for the application to function and are covered by the Supabase cookies listed above.

The application does not use analytics or advertising cookies beyond those listed in this policy.

9. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. We honour DNT signals and will not set analytics cookies if your browser sends a DNT signal.

10. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

We will post any changes on this page with an updated revision date. If we make material changes, we will reset your cookie consent preferences so you can make a new informed choice.

We encourage you to review this policy periodically.

11. More Information

For more information about cookies and online privacy, visit:

Information Commissioner's Office (ICO): ico.org.uk/for-the-public/online/cookies

All About Cookies: allaboutcookies.org

Your Online Choices: youronlinechoices.com

12. Contact Us

If you have questions about our use of cookies, please contact us:

Email: legal@maxxo.ai

For data protection queries, please see our Privacy Policy.