Legal

Privacy Policy

How we protect your personal data, payment information, and privacy.

RSA Encrypted
Data Protected
01

Introduction

Welcome to Pay Box Timers Inc (“we,” “us,” or “our”). We operate the Pay Box Timers mobile application and the website (collectively referred to as the “Service”). This Privacy Policy explains how we collect, use, and disclose your information, and your rights regarding that data.

02

Information Collection and Use

We collect several types of information to provide and improve our Service:

2.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

  • Full name
  • Email address
  • Phone number
  • Pay Box ID number
  • Pre-paid code

Sign-in:You sign in with Google or with Apple. We receive only the name and email address (or Apple's private relay address) that you authorize the provider to share, and use them to create and identify your account. We never receive your Google or Apple password.

2.2 Payment Data

Credit card details: Card payments are processed directly by our payment processors, Stripe and Square. The card number, expiry, and security code you enter are transmitted to and handled by the processor over an encrypted connection. We do not store your full credit card number on our own servers; we keep only a processor-issued payment token, the card brand and the last four digits so you can reuse a saved card and recognise it in your history.

Card scanning: The mobile app can use the camera to read your card number so you do not have to type it. The image is processed on your device and is not stored or uploaded.

Security code (CVV): The card security code is never stored and must be entered each time a credit card transaction is initiated.

2.3 Usage Data

We collect information on how you access and use the Service (“Usage Data”). This Usage Data may include information such as your device's Internet Protocol address (e.g., IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

2.4 Washer Cycle Data (Optional Contribution)

The app includes an optional, opt-in feature that lets you contribute anonymized washer/dryer cycle data to help us improve our machine-cycle detection. This feature is turned off by default and only operates if you explicitly enable it in the app.

When enabled, the app derives cycle characteristics (such as start/stop timestamps and motion-sensor readings used to detect machine state) and uploads them over an encrypted (HTTPS) connection under a random, anonymous installation identifier. This contribution contains no personal information and no location data. Machine-cycle detection uses the phone’s motion sensor only — the app does not request or use the microphone.

You can withdraw at any time by turning the feature off in the app, which stops further uploads and purges any queued data.

2.5 Bluetooth, Location and Tesla Vehicle Data

Bluetooth: The mobile app uses Bluetooth Low Energy to talk to the Pay Box timer in front of you, only while you are on the payment or settings screen. Bluetooth is used to identify the machine and deliver your payment to it. We do not use Bluetooth to track your location or to detect other devices around you.

Location (Tesla home charger): If you use the Tesla charging feature, the app can ask for permission to use your location while the app is open, solely to recognise when you are at a charger you have marked as your own home so that home charging is not gated by payment. The saved home position and Wi-Fi network name are stored only on your device and are never uploaded to our servers. You can decline the permission or clear the saved home at any time.

Tesla vehicle data: If you choose to link your Tesla, you authorize Tesla to share limited vehicle information with us through the Tesla Fleet API: the vehicle identification number (VIN), vehicle name, and charging state (for example whether the car is plugged in and charging). We use this only to start and stop charging that you have paid for and to show you charging status. We do not receive or store your Tesla account password, driving history or trip data. You can unlink your vehicle in the app at any time, which revokes our access.

03

Use of Data

We use the collected data for various purposes, including:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information to improve our Service
  • To monitor the usage of our Service
  • To detect, prevent, and address technical issues
04

Data Sharing and Disclosure

We do not sell your personal and sensitive user data. We may share your information with third parties only under specific circumstances, such as:

Service Providers: We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Payment Processing (Stripe): Card payments on the Service are processed by Stripe, Inc. (United States) and, for Canadian-routed transactions, by Stripe Payments Canada Ltd. When you submit a payment, the data needed to process that payment (including card details handled directly by Stripe's elements, the transaction amount, and identifiers) is transmitted to and stored by Stripe in accordance with Stripe's own privacy policy at stripe.com/privacy.

Payment Processing (Square): Where the owner of a location has chosen Square as their card processor, card payments and prepaid top-ups at that location are processed by Square, Inc. and its affiliates. Card details entered in the app are handled directly by Square's secure card-entry component and are transmitted to and stored by Square in accordance with Square's privacy policy at squareup.com/legal/privacy.

Sign-in Providers (Google and Apple): When you sign in, Google or Apple confirms your identity to us and shares the name and email address you authorize. Their handling of your data is governed by Google's Privacy Policy and Apple's Privacy Policy.

Tesla: If you link a Tesla vehicle, we exchange vehicle identifiers and charge start/stop commands with Tesla's Fleet API on your behalf. Tesla's handling of your vehicle and account data is governed by tesla.com/legal/privacy.

Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

05

Data Security

The security of your data is important to us. We use commercially acceptable means to protect your Personal Data, including encryption of data in transit and tokenized payment handling through our payment processor. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure.

06

International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

Transfers to the United States. Personal Data submitted in connection with a payment — including data handled by our payment processor — may be transferred to, processed, and stored in the United States by Stripe, Inc. and its affiliates. United States data-protection law differs from Canadian (and other) law and may not provide the same protections. By submitting a payment, you consent to this transfer.

Canadian customers. For Canadian-routed transactions, the contracting Stripe entity is Stripe Payments Canada Ltd. Stripe's privacy practices are described at stripe.com/privacy.

07

Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and are aware that your child has provided us with Personal Data, please contact us. If we discover that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information from our servers.

08

Data Retention

Credit Card Information: We do not retain credit card information.

Email: Retained for 2 years for communication and support purposes.

Pre-paid Code: Retained for 2 years for account and transaction verification.

09

Limited Information on Third-Party Sharing

Data is not shared with any service providers, except as necessary to perform services on our behalf.

10

User Rights

Users have the right to request the deletion of their account and associated personal data, including their pre-paid code data. For full instructions — what is deleted, what may be retained, and our timelines — see our Account Deletion page, or contact us at info@limitedresources.us.

11

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “effective date” at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.

12

Contact Us

If you have any questions about this Privacy Policy, please contact us: