Maxio

Maxio

Maxio scripts load hosted billing portal and checkout flow interfaces on websites for SaaS subscription management. Data collected during checkout includes payment details, subscription plan selections, and billing contact information transmitted to Maxio's subscription billing and revenue management platform.

Overview

Maxio (formerly Chargify and SaaSOptics, merged in 2022) is a subscription billing and revenue management platform built specifically for B2B SaaS companies. It combines subscription lifecycle management, automated billing, revenue recognition (ASC 606 / IFRS 15), and SaaS financial metrics (MRR, ARR, churn, LTV) into a single platform. When integrated into a website, Maxio provides the hosted checkout interfaces and self-service billing portals that subscribers use to sign up, upgrade, downgrade, and manage their accounts.

Maxio serves mid-market and growth-stage SaaS companies that need billing automation beyond what Stripe Billing or Chargebee offer out of the box — particularly around complex pricing models (usage-based, hybrid, custom contracts) and SaaS-specific revenue reporting.

What This Script Does

Maxio's client-side scripts render hosted billing UI directly on the merchant's website or application:

Hosted checkout pages: Maxio's checkout scripts (js.chargify.com — the legacy domain still in use — or Maxio-branded equivalents) render subscription plan selection, quantity configuration, and payment method collection within the merchant's checkout flow. For payment collection, card details are entered into PCI-compliant hosted fields that tokenize the card data within Maxio's certified environment before it ever touches the merchant's servers.

Self-service billing portal: Existing subscribers access a Maxio-powered billing management portal embedded in the merchant's application. Through this portal, the script enables customers to update their payment method, switch subscription plans, add or remove components (for usage-based billing), view invoice history, download invoices, and cancel or pause subscriptions. These are explicit user-initiated actions.

Payment method management: The script handles secure tokenization of new payment methods (credit cards, ACH bank accounts) through Maxio's PCI-DSS Level 1 certified hosted fields. Actual card numbers never pass through the merchant's application server.

Session state cookies: Session cookies maintain checkout state so that customers progressing through a multi-step checkout (plan selection → billing details → confirmation) do not lose their selections on navigation. These cookies are strictly functional, scoped to the duration of the checkout or portal session, and do not persist beyond the active session.

Subscription event webhooks: While not browser-side, Maxio fires server-side webhooks on subscription events (signup, renewal, upgrade, cancellation) to the merchant's application. These are server-to-server and involve no client-side data collection.

No behavioral analytics: Maxio does not deploy behavioral tracking, session replay, advertising pixels, or marketing analytics. Its scripts are scoped to transactional billing functionality.

Consent & Compliance

Maxio scripts serve a purely functional and transactional purpose:

  • GDPR / ePrivacy: Under the ePrivacy Directive, cookies and scripts that are strictly necessary for a service explicitly requested by the user are exempt from prior consent requirements. Maxio's checkout and billing portal scripts — which process payments and manage subscriptions at the user's explicit request — fall squarely within this exemption. The lawful basis under GDPR is Article 6(1)(b): performance of a contract.
  • PCI-DSS: Maxio is PCI-DSS Level 1 certified. Payment card data is tokenized within Maxio's hosted field environment; merchants using Maxio's hosted checkout operate in a reduced PCI scope.
  • CCPA/CPRA: Billing data (payment method, billing address, subscription plan) is collected under a service contract with the customer. This is not a "sale" of personal information under CCPA.
  • EU-US transfers: Maxio is a US-based company. Merchants processing EU subscriber data through Maxio should have a DPA in place. Maxio participates in the EU-US Data Privacy Framework.

Should You Block This Without Consent?

No. Maxio scripts provide essential billing and checkout functionality — subscription sign-up, payment processing, and account management — that is strictly necessary for completing transactions the user has explicitly initiated. Blocking Maxio would prevent users from subscribing, paying, or managing their billing accounts.

Visit website

Consent Categories

Functional

Also Known As

maxiomaxio billingsaas subscription checkout consentmaxio privacychargify maxio

Industries

FinanceComputers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer Software

Tracked Domains (1)

maxio.comFunctional

Frequently Asked Questions

Does Maxio require consent management on a SaaS website?

No. Maxio provides hosted checkout and self-service billing portal functionality for subscription management. Its scripts activate when users explicitly initiate a subscription or manage their billing, making session cookies strictly necessary under ePrivacy. The lawful basis under GDPR is performance of contract.

What does the Maxio checkout script handle during a subscription sign-up?

Maxio renders plan selection, collects billing details, and processes payments through PCI-DSS Level 1 certified hosted fields that tokenize card data before it reaches the merchant's servers. Session cookies maintain checkout state across multi-step flows. Maxio fires no behavioral analytics, advertising pixels, or session replay tools.

How does ConsentStack classify Maxio in a subscription SaaS consent configuration?

ConsentStack classifies Maxio as a functional vendor and exempts it from consent-gating. Because Maxio scripts activate only during user-initiated billing actions, ConsentStack treats them as strictly necessary for completing the requested transaction. Maxio is documented in the vendor list under functional or essential processing.

Related Vendors

Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Power Apps
Microsoft Power Apps
Microsoft Power Apps is a low-code application development platform that enables embedded business applications on websites. Scripts load custom app interfaces from Microsoft's cloud, render form controls and data views, and connect to backend data sources through Power Platform connectors. Sets session cookies to maintain application state and user authentication.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Microsoft Viva
Microsoft Viva
Microsoft Viva is an employee experience platform that surfaces on websites through embedded engagement and learning modules. Scripts load content feeds and knowledge cards from Microsoft's cloud infrastructure. Sets authentication cookies for user identity and personalized workplace content delivery.

Manage consent for Maxio

ConsentStack automatically detects and manages Maxio trackers so your site stays compliant with global privacy regulations.