Privacy Policy

1. Introduction

Welcome to DigiQ ("DigiQ", "we", "our", or "us"), a digital waitlist and queue-management service operated by Appseed Technologies Private Limited. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service, whether you are a guest joining a queue or a business (venue) managing one.

We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and, where applicable, the General Data Protection Regulation (GDPR).

2. Who This Policy Covers & Our Roles

For Guests (Customers)

When a guest joins a venue's queue — typically by scanning a QR code and messaging us on WhatsApp — the venue is the data controller of that guest's information and DigiQ acts as a data processor on the venue's behalf. DigiQ processes guest data only to deliver the queue service the venue has requested.

For Businesses (Venues)

For business accounts, staff logins, subscriptions and platform analytics, DigiQ is the data controller. Venues are independently responsible for having a lawful basis to collect their guests' data and for their own privacy notices to their customers.

3. Information We Collect

From Guests

When you join a waitlist or place a token order, we collect:

• WhatsApp / phone number — used to identify your queue entry and send you updates.
• Name — optional; provided so staff can address you.
• Party size (for table waitlists) or token number (for order/token pickup).
• Queue & conversation data — your position, status, check-in code, and the WhatsApp messages exchanged to run the queue.
• Push-notification subscription — if you enable browser notifications, the token needed to notify you when your table/order is ready.

From Businesses

• Business profile — venue name, location(s), business type, and queue configuration.
• Staff & admin accounts — name, phone number, email (optional), role, and a securely hashed password.
• Subscription & billing records — plan/subscription dates, notes, and amounts recorded for your account.

Automatically Collected

• Device and browser information, usage data, approximate/IP-based location, and log timestamps — used for security, reliability, and to improve the service.

4. How We Use Your Information

Primary Purposes

• Manage your position in the queue and issue token/check-in identifiers.
• Send notifications (via WhatsApp and, if enabled, web push) when your turn is approaching, ready, or completed.
• Communicate essential updates about your waitlist or order status.
• Provide the venue dashboard, analytics, and customer support.
• Secure the platform, prevent abuse, and meet legal obligations.

Secondary Purposes (Only With Consent)

• Adding you to a venue's customer database (only if you consent).
• Marketing or promotional communications (only if you opt in).
• Personalising future visits and conducting analytics to improve our services.

We do not sell your personal data.

5. Sharing & Third-Party Services

We share data only as needed to run the service:

• The venue you are visiting — receives your queue entry so its staff can serve you.
• WhatsApp / Meta Platforms — messages are delivered through the WhatsApp Business (Cloud) API; their handling is subject to Meta's terms and privacy policy.
• Web-push providers — your browser's push service delivers "ready" notifications when enabled.
• Infrastructure & hosting providers — process data on our behalf under confidentiality obligations.
• Legal authorities — where required by applicable law.

We do not use SMS and do not require any app download.

6. Data Protection & Security

We apply industry-standard safeguards, including encryption in transit and at rest, role-based access controls, data masking, secure infrastructure, and regular audits. No method of transmission or storage is completely secure, but we work continuously to protect your information.

7. Your Privacy Rights

Under the DPDP Act 2023 and GDPR you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format (JSON/CSV).
• Withdraw consent — for marketing or database inclusion at any time.
• Object — to certain processing of your personal data.

To exercise any of these rights, email us at privacy@appseed.in. Guests should note that, because the venue is the controller of queue data, some requests may be directed to the relevant venue.

8. Data Retention

We retain personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. After the applicable retention period, data is automatically deleted or anonymised. Expired WhatsApp push subscriptions and abandoned draft entries are cleared automatically.

9. Children

DigiQ is not directed at children. We do not knowingly collect personal data from children without appropriate consent as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and continued use of the service constitutes acceptance of the revised policy.

11. Contact & Grievance Officer

For privacy questions: privacy@appseed.in  ·  General support: support@appseed.in

In accordance with the DPDP Act 2023, our Grievance Officer can be reached at grievance@appseed.in. We aim to respond within 72 hours.

Operated by Appseed Technologies Private Limited · appseed.in