Privacy Policy

Last updated: 30 Oct 2026

Who We Are

This Privacy Policy describes how Qiq LLC (“Qiq”, “we”, “us”, “our”) collects, uses, discloses, and safeguards personal information when you visit our websites (including qiq.one) and when you use Qiq’s software-as-a-service products and related services (the “Services”). For our marketing websites, trials and direct subscriptions, Qiq acts as a data controller. For customer-provided data processed within the Services, Qiq acts as a data processor under the customer’s instructions and our Data Processing Addendum (DPA).

Contact Details

• Legal entity: Qiq LLC
• Address: 809 Cuesta Dr Ste B, Mountain View, CA 94040, USA
• Email: privacy@qiq.one

Scope

This Policy applies to personal information about website visitors, trial users, paid account holders, their authorized end users (as configured by a customer), billing contacts, applicants and support requesters. This Policy does not apply to third-party websites or services linked from our sites.

Current public website & early access

The currently active public service processes only the data needed to operate this website and measure early interest:

• Waitlist: email and, if supplied, first/last name, profession, edition of interest and newsletter choice.
• Contact requests: name, email, selected topic and message.
• Public assistants: text entered in Ask Qiq AI, the pricing advisor or use-case helper is processed transiently to return a response. It is not used to train an external AI model and is not intentionally stored as a lead record.
• Interest measurement: aggregate edition, action, source, path and locale counters. Qiq does not add a visitor identifier to these events.
• Technical data: IP address, user agent, timestamps and security/error logs may be processed by Qiq, Hetzner and the Pointer proxy to deliver and protect the website.

Purpose and legal basis: requested contact and launch updates are processed to respond to your request and for Qiq’s legitimate interest in operating the early-access programme. Optional newsletter messages are sent only where you select the newsletter checkbox and may be withdrawn at any time.

Recipients and retention: contact and waitlist records are stored on Qiq’s Hetzner-hosted server and are pruned after no more than 24 months, unless earlier deletion is requested or a legal obligation requires longer retention. If lead notifications are enabled, the submission may also be sent to Resend or a configured notification endpoint solely to alert Qiq. Aggregate interest counters may be kept longer because they do not contain a direct visitor identifier.

Information We Collect

Information you provide to us

• Account & Profile: name, email, password (hashed), business name, role/title, country, preferred language, workspace name.
• Billing: billing name, address, VAT/Tax ID, plan, transaction metadata from our payment provider (we do not store full card numbers).
• Support: messages, attachments, screenshots or logs you voluntarily provide.
• Content: data you upload or enter into the Services (as a customer); for such data we act as a processor under the DPA.

Information collected automatically

When you access the Services, we automatically collect technical data for security and functionality: IP address, device and browser type/version, operating system, language, referrer, pages viewed, timestamps, session diagnostics (response times, download errors, scrolls, clicks), and server/application logs. We may use privacy-respecting analytics to improve reliability and UX. This data typically does not identify you directly.

Cookies, local storage & similar technologies

We use strictly necessary cookies and storage for authentication, security and preferences, and functional cookies as needed. See our Cookie Policy for categories, durations and controls.

Mobile-specific (optional) data

• Location (GPS) if you grant permission, to provide customer-configured features.
• Contacts if you grant permission, to enable faster selection of recipients/attendees.
• Camera/Photos if you grant permission, to upload images (e.g., receipts, avatars). Permissions are optional and can be revoked in OS settings.

How We Use Personal Information

• Provide, maintain and improve the Services (performance of contract, Art. 6(1)(b) GDPR).
• Authenticate and secure accounts; detect, prevent and address fraud/abuse (legitimate interests, Art. 6(1)(f)).
• Customer support and service communications (legitimate interests; some messages are necessary).
• Billing & account administration, compliance with tax/accounting and other legal obligations.
• Product analytics in aggregate or de-identified form to improve reliability and user experience.
• Marketing communications with consent where required; you may opt out at any time.

Our Roles: Controller vs Processor

For our websites, trials and direct subscriptions, Qiq is the controller. For customer-submitted data within the Qiq platform, Qiq is a processor and processes such data only per the customer’s instructions and the DPA. Customers (controllers) are responsible for lawfully collecting data from their end users and honoring data subject rights requests.

Sharing & Subprocessors

We do not sell personal information. We disclose limited information to:

• Payment & billing providers for subscription management and collections.
• Professional advisors (legal/accounting) under confidentiality obligations.
• Authorities where required by law or to protect rights, safety and service integrity.
• Corporate events (merger, acquisition, financing or sale of assets) subject to appropriate safeguards.

An up-to-date list of subprocessors is available on request.

International Data Transfers

Where personal data is transferred from the EEA/UK to countries without an adequacy decision, we rely on appropriate safeguards, including the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer mechanisms, plus supplementary technical and organizational measures (e.g., encryption in transit and at rest, access controls).

Data Retention

We retain personal data as long as necessary to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. Customer data in the platform is retained according to the customer’s settings and our contract; upon termination or request, we delete or return it within commercially reasonable time unless law requires longer retention.

Security

We implement administrative, technical and physical safeguards, including TLS encryption in transit, hardened infrastructure, network segregation, least-privilege access, audit logging and backups. For certain categories of data, we support encryption at rest (e.g., InnoDB tablespace encryption, encrypted volumes/objects). No method is 100% secure; we continually improve our controls.

How We Use Email Addresses

By providing your email, you agree to receive service-related communications (e.g., onboarding, security notices, billing). You can opt out of non-essential marketing emails via unsubscribe links. We do not send unsolicited commercial emails and we do not sell email lists.

Advertising, Analytics & Tracking

• Analytics: we may use privacy-respecting analytics to understand aggregate usage and improve the Services.

Your Rights

EEA/UK (GDPR)

• Access, rectification, erasure, restriction, portability and objection to processing.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a supervisory authority.

To exercise rights, contact info@qiq.one. If we process your data on behalf of a customer, please contact that customer (controller) directly.

California Residents (CCPA/CPRA) & CalOPPA

• Right to know/access categories and specific pieces of personal information collected.
• Right to deletion (subject to exemptions) and correction.
• Right to opt-out of “sale” or “sharing” for cross-context behavioral advertising (we do not sell personal information).
• Right to non-discrimination for exercising your rights.

We respond to verifiable consumer requests within timelines required by law.

Children’s Privacy

The Services are not directed to children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children. If you believe a child provided personal data to us, contact us to request deletion.

Personnel

If you apply for a role or work with Qiq, we process HR-related information you provide for recruitment and employment administration, consistent with this Policy and applicable employment laws.

Affiliates

We may share information with corporate affiliates under common control for purposes consistent with this Policy and subject to appropriate safeguards.

Sale of Business

We may transfer information in connection with a corporate transaction (merger, acquisition, financing or sale of assets), subject to continued protection of personal information consistent with this Policy.

Third-Party Links

Our Services may contain links to third-party sites not operated by Qiq. Their privacy practices are governed by their own policies; we are not responsible for their content or practices.

Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. There is currently no industry standard for DNT; we respond to privacy controls as required by applicable law and provide cookie controls in our Cookie Policy.

Changes to This Policy

We may update this Policy to reflect changes to our practices or for legal, operational or regulatory reasons. The “Last updated” date indicates the latest revision. Where appropriate, we will provide additional notice.

Contact Us

• Email: info@qiq.one
• Postal: Qiq LLC, 809 Cuesta Dr Ste B, Mountain View, CA 94040, USA

For processing performed as a processor, see the DPA. This Privacy Policy should be read together with our Terms of Service and Cookie Policy.