Privacy Policy

This policy explains how [Company legal name and registered address] ("Qwise") handles personal data. Qwise plays two roles: we are the controller of data about people who visit our website, join our waitlist or hold a Qwise account, and a processor of data about people who join a queue run by one of our business customers. For queue participants, the business running the queue decides why their data is collected; we process it on the business's behalf under our Data Processing Addendum.

What we collect

• Website visitors and waitlist: email address and whether you run a business or events, plus basic technical data needed to serve the site and prevent abuse (IP address, browser type) via Cloudflare.
• Account holders (businesses and their staff): name, email, password (stored only as a salted hash), role, and activity in the account. Billing details are collected by Stripe; we receive your plan, subscription status and billing email, never your card number.
• Queue participants (customers of our customers): the name you enter, your email address and/or phone number, the service and party size you choose, and your place and timestamps in the queue. A phone number is used for text messages only if you tick the separate text-message box.
• Volunteers at events: a label chosen by the event host. No account or personal details are required.

How long we keep it

• Queue participant details (name, email, phone) are deleted automatically within 24 hours after your turn ends or you leave, and immediately when an event is closed. After that only anonymous statistics remain (wait times, counts, service chosen), with no name or contact detail.
• Delivery logs (which message was sent, to a masked address) are kept for 30 days.
• Account data is kept while the account is active and deleted on request or after the account is closed, except what we must keep for tax and legal reasons.
• Waitlist emails are kept until launch or until you ask to be removed.
• Opt-out records for text messages are kept so that we never message a number that has said STOP.

Why we use it, and our legal bases

To run the queue you joined and tell you when it is your turn (performance of the service requested by you and the business; for text messages, your consent); to operate accounts and billing (contract); to keep the service secure and prevent abuse (legitimate interests); and to meet legal obligations. We do not sell personal data and we do not use queue participants' details for marketing.

Who we share it with

Only the service providers below, each bound by a data processing agreement, plus the business whose queue you joined (who sees the names and masked contact details of its own queue).

• Cloudflare, Inc.: Hosting, database, queues, file storage, DNS and security. Global network; account data stored in the region configured for the database.
• Stripe, Inc.: Payment processing for subscriptions, Event Passes and SMS packs. United States and other Stripe locations.
• Resend, Inc.: Sending transactional email (verification, queue alerts, reports). United States.
• Twilio Inc.: Sending SMS queue alerts. United States and carrier networks.

Cookies and local storage

We use only what is necessary to provide the service: a sign-in session cookie for staff and administrators, and your browser's local storage to remember your own queue ticket on your device and (for staff counters) actions waiting to sync while offline. We do not use advertising or cross-site tracking cookies, so there is no cookie banner to dismiss. Cloudflare Turnstile may run a short check to confirm you are not a bot.

International transfers

Our providers operate globally. Where personal data is transferred outside the UK or European Economic Area we rely on appropriate safeguards such as the European Commission's standard contractual clauses. [Confirm with counsel.]

Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to our use of your data, to data portability, and to withdraw consent. If you joined a queue, please contact the business first; it can ask us to act on your request, or you can write to us at privacy@qwise.app. You may also complain to your data protection authority. Reply STOP to any text message to stop text messages immediately.

Security

Data is encrypted in transit; access to administration tools requires single sign-on with multi-factor authentication; staff access to personal data is limited, time-boxed, requires a written reason and is logged.

Children

Qwise is for businesses and events. It is not directed at children under 16 and we do not knowingly collect their data for our own purposes.

Changes and contact

We will post updates here and, for material changes, tell account holders. Questions: privacy@qwise.app. [Company legal name and registered address]