Privacy Policy

1. What we collect

• Organisers: name, email, password (stored securely by our authentication provider), mobile number if you add it, business and event details, and billing records.
• Visitors joining a queue: the name you enter, and your mobile number if you give it.
• Ticket buyers: name, mobile and email as asked by the organiser, the tickets bought, the UPI transaction ID you enter, and entry and checkpoint scans (time and gate).
• Payouts for free-to-start events: legal name, contact details, and the last 4 digits of the PAN and bank account. The full numbers go directly to Razorpay.
• Technical data: device and browser type, pages visited, and approximate location from your IP address, used for security and, with your consent, analytics and advertising.

2. Why we use it

• To run the service: show queues and tickets, send you your token or ticket link, and let organisers serve you.
• To take payments and keep billing records.
• To keep the service secure and prevent fraud and misuse.
• To improve Qwait and, only if you agree to cookies, to measure and improve our advertising.
• To meet legal obligations.

3. Who sees it

• The organiser of the queue or event you join sees the details you give them.
• Service providers who process data for us: Supabase (database and login), Vercel (hosting), Razorpay (payments and payouts), and, with your consent, Google and Meta (analytics and advertising).
• Authorities, when the law requires it.

We do not sell personal data.

4. Cookies and tracking

We use essential storage to keep you signed in and remember your bookings on your device. Analytics and advertising cookies (Google Analytics, Google Ads, Meta Pixel) are used only if you accept them in the cookie banner. You can change your choice at any time from the "Cookie settings" link in the footer.

5. How long we keep it

Account data is kept while your account is open. Queue and ticket records are kept so organisers can see their history; organisers can delete queues and events. Billing records are kept as long as tax law requires. When you delete your account we delete or anonymise your personal data, except where we must keep it by law.

6. Security

Data is encrypted in transit, access is restricted by account, and secrets such as organisers' payment keys are stored encrypted. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.

7. Your rights

You can ask to access, correct or delete your personal data, withdraw consent, or nominate someone to act for you. Write to info@qwait.in. If you joined someone else's queue or event, you can also ask that organiser directly.

8. Children

Qwait is not meant for children to use on their own. Accounts are for people 18 or older; a parent or guardian can book for a child.

9. Grievance Officer

Midhun V Manikkath (Proprietor), Imagenie, 201, Dreams Heritage, Vakayil Lane, Sawmill Road, Koorkencherry, Thrissur 680007, Kerala, India. Email: info@qwait.in. We acknowledge complaints within 48 hours and aim to resolve them within 30 days.

10. Changes

We will post any changes here with a new date, and tell account holders about important changes.