Privacy policy

What we collect

Business owners and team members: your email address, your password (stored only as a one-way hash, so nobody can read it), and, if you add them, your name and mobile number. For each business: its name, address, type, services, prices, service points and the names of team members you add.

Customers who join a queue: the services you pick, your token number and its times (when you joined, were called and were served), and your name if you choose to give one. We never ask customers for a phone number, an email address or an account.

Alerts: if you turn on alerts, your browser gives us a push address from Apple, Google or Mozilla. We use it only to tell you when your turn is near.

Enquiries: if you use “Talk to us”, we keep your name, the email or mobile number you give us, your business type and your message.

Technical data: your IP address is used to stop abuse, such as too many requests from one address, and appears in our server logs. Cloudflare Web Analytics counts page visits without cookies and without identifying you.

What is stored on your device

Your browser keeps a few things so the app works: your login (for business accounts), your ticket for each queue you join, the name you typed, and whether you turned alerts off. We don’t use advertising or tracking cookies.

How we use it

To run queues and show each business its own queue, wait estimates and insights; to send the alerts you ask for; to send account emails such as password reset links; to answer enquiries; and to keep the service secure. We don’t sell your data, and we don’t show ads.

Who can see it

The business you join sees your token, the services you picked, your name if you gave one, and whether you said you’re on your way or running late.

Service providers who run parts of qWisely for us: Google Cloud (servers in Mumbai, India), MongoDB Atlas (database), Cloudflare (website and analytics), our email provider (Gmail or Resend), and Apple, Google and Mozilla for alerts. They handle data only to provide their service to us.

Authorities, if the law requires us to share it.

How long we keep it

Tokens, including customer names, services and alert addresses, are deleted automatically 60 days after the day they were issued. Business accounts and their businesses are kept until you ask us to delete them. Enquiries are kept while we follow up with you, and deleted on request.

Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us for a summary of your data, ask us to correct or delete it, withdraw consent, raise a grievance, and nominate someone to act for you. Owners can change their name, mobile number and password on the Account page. For anything else, including deleting your account, email us from the address on your account. We’ll reply within the time the law allows.

Security

Everything travels over HTTPS. Passwords are hashed, ticket links use long random keys, and only the business you joined can see your token details. No system is perfectly secure, but we work to protect your data and will tell affected users about a breach as the law requires.

Children

Business accounts are for adults. Customers of any age can join a queue without giving personal details.

Changes

If we change this policy, we’ll update the date above. For important changes, we’ll tell business owners by email or in the app.

Contact and grievances

Questions, requests or complaints about your data or these terms: email support@qwisely.com, or use Talk to us.