1. Introduction

Qnow ("we," "our," or "us"), operated by Qnow Labs LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our queue management service ("Service").

Business Information:
Legal Business Name: Qnow Labs LLC
Trading Name: Qnow
Location: United States
Email: support@qnow.ai

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

Account Information: Business name, phone number, password, and industry type when you create an account
User Information: Names, phone numbers, and email addresses of staff and service providers you add to your account
Visitor Information: Names and phone numbers (optional) of visitors who join your queues
Payment Information: Billing and subscription details processed securely through Paddle, our payment processor and Merchant of Record. Paddle handles all payment data in accordance with PCI-DSS standards. We do not store complete credit card information on our servers.
Communications: Information you provide when contacting our support team

2.2 Automatically Collected Information

When you use the Service, we automatically collect certain information:

Usage Data: Queue operations, visitor creation, user actions, and feature usage
Device Information: IP address, browser type, device type, and operating system
Log Data: Access times, pages viewed, and actions taken within the Service
Cookies: Small data files stored on your device to improve user experience

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve the queue management Service
Account Management: To create and manage your account and subscription
Communication: To send service updates, security alerts, and support messages
Payment Processing: To process subscription payments through our third-party payment processor
Analytics: To understand how users interact with the Service and improve functionality
Security: To protect against fraud, unauthorized access, and security threats
Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers (sub-processors) who assist in operating the Service. These service providers are contractually obligated to protect your information and use it only for the purposes we specify:

Hosting Services: Vercel (hosting and deployment infrastructure) and Supabase (database and authentication services) for data storage, processing, and application hosting.
Payment Processing: Paddle (our payment processor and Merchant of Record) for subscription billing, payment processing, tax collection, and compliance. Paddle processes payments securely and handles all payment-related data in accordance with their privacy policy and PCI-DSS standards.
Analytics: Service providers that help us understand usage patterns and improve the Service (may include Vercel Analytics and other analytics tools).
Communication: Email and messaging services for transactional notifications, service updates, and support communications.

We may update this list of sub-processors from time to time. If we add new sub-processors that process personal data, we will update this Privacy Policy accordingly. You can contact us at support@qnow.ai if you have questions about our sub-processors.

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption: Data is encrypted in transit using SSL/TLS and at rest
Access Controls: Strict access controls limit who can view your data
Authentication: Secure authentication mechanisms protect account access
Monitoring: Continuous monitoring for security threats and vulnerabilities
Backups: Regular backups to prevent data loss

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Despite our security measures, unauthorized access, data breaches, hacking attempts, or other security incidents may occur due to:

Sophisticated cyberattacks or third-party malicious actors
Vulnerabilities in third-party infrastructure or service providers
Zero-day exploits or advanced persistent threats
Social engineering attacks or compromised user credentials
Other security threats beyond our reasonable control

You acknowledge that you use the Service at your own risk and accept the inherent security risks of internet-based services.

5A. Data Breach Notification

In the event of a data breach or security incident that compromises your personal information, we will:

Conduct a reasonable investigation to determine the scope and impact
Take steps to contain and remediate the breach
Notify affected users in accordance with applicable laws
Cooperate with law enforcement and regulatory authorities as required

The timing and method of notification will be determined based on the nature of the incident, legal requirements, and law enforcement guidance. We are not obligated to provide notification within any specific timeframe if doing so would compromise ongoing investigations or security measures.

We shall not be liable for any damages arising from data breaches or security incidents. Our liability is limited as described in our Terms of Service.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

Active Accounts: Data is retained while your account is active
Cancelled Accounts: Data may be retained for up to 90 days after cancellation for backup and recovery purposes
Legal Requirements: Some data may be retained longer to comply with legal obligations
Anonymous Data: Aggregated, anonymized data may be retained indefinitely for analytics

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information at any time through your account dashboard.

7.2 Data Deletion

You can request deletion of your account and associated data by contacting our support team at support@qnow.ai. Note that some information may be retained as required by law.

7.3 Opt-Out

You can opt out of non-essential communications by updating your notification preferences or clicking "unsubscribe" in our emails. Note that transactional emails (such as account notifications, security alerts, and billing information) are essential and cannot be opted out of.

Marketing Communications: We will only send you marketing communications if you have explicitly opted in. You can opt out of marketing communications at any time by updating your preferences or contacting us at support@qnow.ai.

7.4 Data Export and Portability

You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format. You can request an export of your data by contacting our support team at support@qnow.ai. We will provide your data export within 30 days of your request, subject to verification of your identity.

The exported data will include:

Account information (business name, contact details, settings)
Queue and visitor data
User and staff information associated with your account
Other data you have provided to the Service

Data exports are provided in JSON or CSV format, depending on the type of data. This right is particularly important for users in the European Union and United Kingdom under GDPR and UK GDPR, but is available to all users.

7.5 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

8. International Data Transfers

The Service is available to users worldwide. Your information may be transferred to and processed in countries other than your own, including but not limited to countries where our infrastructure, service providers, and data centers are located.

We ensure appropriate safeguards are in place to protect your information during international transfers in accordance with this Privacy Policy and applicable data protection laws. By using the Service, you consent to the transfer of your information to other countries as necessary to provide the Service.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will delete such information.

10. Visitor Privacy

10.1 Visitor Data

When visitors join queues using your QR code, they provide their name and optionally their phone number. This information is stored to manage the queue and provide status updates.

10.2 Anonymous Authentication

Visitors access their queue status using a unique visitor code through anonymous authentication. No personal accounts or passwords are required for visitors.

10.3 Visitor Data Control

As the business owner, you control visitor data collected through your queues. You are responsible for informing visitors about data collection and obtaining necessary consents as required by local laws.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates when changes were made. Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Compliance with Applicable Laws

We are committed to complying with data protection and privacy laws applicable to our operations and our users' locations. This includes, but is not limited to, regulations in India, Singapore, Southeast Asia, and other jurisdictions where we operate or have users.

Our data handling practices are designed to meet or exceed the requirements of applicable laws, including:

Lawful basis for data collection and processing
User rights to access, rectify, and delete personal data
Data security and breach notification requirements
Cross-border data transfer safeguards
Consent and transparency obligations

Where local laws impose stricter requirements than this Privacy Policy, those local laws will apply to users in that jurisdiction. You are responsible for ensuring that your use of the Service complies with applicable laws in your location.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@qnow.ai or through the contact information provided on our website.

15. Data Protection Officer

For privacy-related inquiries, you can reach our Data Protection Officer at support@qnow.ai or through the contact information provided on our website.

16. Your Consent

By using the Service, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please discontinue use of the Service.