Privacy Policy

This Privacy Policy describes how we collect, use, store, and protect information when you: • Access our website www.queuestream.pro • Use our mobile applications or SaaS dashboard • Subscribe as a business (B2B client) or interact as a customer (end-user) By using our platform, you agree to this Privacy Policy. If you do not agree, please discontinue use of our services.

Scope and Application

This Privacy Policy applies to: • All users of QueueStream (business clients, admins, and end customers). • All data collected through our website, mobile apps, and APIs. • Global users, regardless of country of residence. QueueStream complies with: • Digital Personal Data Protection Act, 2023 (India) • General Data Protection Regulation (GDPR – EU/EEA) • California Consumer Privacy Act (CCPA – USA) • Other international privacy frameworks where applicable.

Information We Collect

We collect only the information necessary to deliver and improve our services. Information from Business Clients: • Business name, address, and contact details. • Authorized representative’s name, phone number, and email. • Branch and service configuration details. • User login credentials (hashed, not visible to us). Information from End Users (Customers): • Name and mobile number (for SMS notifications). • Service type, branch, and appointment details. • Token number, time of entry, and feedback (ratings/comments). • Device and browser details (for app or portal use). • Location (only if using geo-verified QR code ticketing). Automatically Collected Information: • IP address and approximate geolocation. • Device identifiers, browser type, operating system. • Access logs, usage analytics, and performance metrics. We do not collect or process financial data since QueueStream has no payment integration within its platform.

How We Use Collected Information

We use your data to: • Create and manage tokens, appointments, and service queues. • Send SMS or email notifications for token and appointment updates. • Display live queue data on screens and dashboards. • Manage bilingual announcements and waiting room content. • Generate analytics and operational insights for clients. • Provide customer feedback and performance reports. • Improve functionality, user experience, and system reliability. We never sell personal data to advertisers or unrelated third parties.

Legal Bases for Processing (GDPR)

If you are located in the EU or other GDPR jurisdictions, we process your data under one or more of these bases: • Contractual Necessity: To provide QueueStream services. • Legitimate Interest: To improve and secure our platform. • Consent: For communications, feedback, or analytics. • Legal Obligation: To comply with laws or court orders.

Data Retention

Token and queue data are stored as long as necessary for service and reporting. Personal data (name, phone, email) is retained only while your account is active. Feedback data may be anonymized for analytics. You can request deletion of your data at any time (see Section 11).

Cookies and Web Tracking

Our website uses cookies and tracking tools (e.g., Google Analytics) to: • Analyze traffic and usage patterns. • Improve website and service performance. • Maintain secure sessions for admin users. You can manage or disable cookies through your browser settings.

Data Security

We employ industry-leading safeguards to protect your data: • HTTPS and TLS encryption for all communication. • Secure cloud infrastructure (AWS / Azure / equivalent). • Encrypted databases and access logging. • Role-based access control for staff and admins. • Regular backups and vulnerability assessments. Despite our best efforts, no online platform is 100% immune from risks. We encourage responsible use and reporting of any suspected security concerns to security@queuestream.pro.

Data Transfers and International Storage

QueueStream may store and process data in: • India (primary data center) • Other global locations (via secure cloud infrastructure providers) All international transfers comply with data adequacy frameworks (GDPR Articles 44–49) and standard contractual clauses.

Third-Party Services

We integrate with reputable providers to deliver certain functions: • SMS delivery – TextLocal, MSG91, Twilio • Email notifications – SendGrid, AWS SES • Analytics – Google Analytics, PostHog • Cloud hosting – AWS, Azure, or equivalent Each provider complies with global data protection standards and processes only minimal, required data.

Your Rights (Global Data Subjects)

Depending on your region, you have the right to: • Access and receive a copy of your personal data. • Request correction of inaccurate information. • Request deletion (“Right to be Forgotten”). • Restrict or object to data processing. • Withdraw consent for optional features (e.g., marketing communication). To exercise these rights, email us at privacy@queuestream.pro. We will verify your identity and respond within the timelines required by applicable law.

Children’s Data

QueueStream services are designed for businesses and adult users. We do not intentionally collect or store information from anyone under 16 years of age. If such data is found, it will be deleted promptly.

Data Sharing and Disclosure

We may disclose limited data only when: • Required by law, regulation, or court order. • Necessary to protect our platform or prevent fraud. • Shared with subcontractors bound by confidentiality and data protection obligations. We never sell personal information to third parties.

Your Responsibilities (Business Clients)

If you are a QueueStream business client, you are the data controller for your customers’ information. QueueStream acts as your data processor, managing data on your behalf. You must: • Obtain customer consent where required. • Configure your privacy preferences properly. • Ensure your data usage complies with applicable law.

Data Retention for Global SaaS Clients

Unless otherwise required by law: • Business account data is retained while your subscription is active. • After cancellation, data is stored for 90 days before deletion. • Backups may persist for an additional 30 days before permanent purge.

Policy for CCPA (California Residents)

California residents have the right to: • Know what personal data is collected. • Request deletion of their personal data. • Opt out of data sharing or sales (QueueStream does not sell data). You can contact help@queuestream.pro to exercise these rights.

Updates to This Policy

We may modify this Privacy Policy from time to time to reflect legal, technical, or operational changes. The revised version will always be available at: https://www.queuestream.pro/privacy We encourage periodic review. Continued use after updates means you accept the changes.