Privacy Policy

01Who we are

Kueues is operated by Kueues Technologies Inc., 548 Market St, San Francisco, CA 94104 ("Kueues", "we", "us"). This policy covers our website, dashboard, staff links, display boards, customer ticket pages and API (together, the "Service").

For information about a business's own customers, the business is generally the party that decides why the information is processed, and we act as its service provider (a "processor" in some laws). For account and billing information about the business itself, we are responsible.

02Information from businesses

When you sign up and use the Service, we collect:

• Account details: your name, email, optional mobile number, password (stored only as a salted hash), business name, type, country and time zone.
• Billing details: plan, billing status and invoices. Card details are collected and stored by Stripe; we never see or store full card numbers.
• Operational data: tickets, queues, staff link names and roles, settings, logos you upload, API keys (stored hashed), webhook endpoints and delivery logs.
• Integration data: if you connect Square or Toast, the location and order identifiers we need to create tickets, plus access tokens stored encrypted.
• Technical data: IP address, browser type and request logs, used for security, rate limiting and debugging.

03Information from customers

Customers do not create accounts. When someone scans a QR code or opens a ticket link, we process:

• Ticket details: the ticket number, status and timestamps, and a name only if the customer or the business adds one.
• Push subscription: if the customer turns on alerts, the browser's push endpoint and keys, so we can ring that phone.
• Phone number: only if the customer chooses text message alerts. We use it to send ready alerts for that ticket and delete it 24 hours after pickup.
• Feedback: an optional star rating and comment after pickup, shared with the business.

We do not use customer information for advertising, and we do not build profiles of customers across businesses.

04How we use information

• To run the Service: create tickets, ring phones, show display boards and sync with connected point-of-sale systems.
• To bill subscriptions and send receipts, account notices and security alerts.
• To keep the Service safe: detect abuse, enforce rate limits and investigate problems.
• To improve the Service using aggregated, de-identified usage statistics.
• To comply with law and respond to lawful requests.

05Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Service providers that process data on our behalf under contract: Stripe (payments), Twilio (text messages), our email delivery provider, and our cloud hosting and database providers.
• The business you are dealing with: a customer's ticket, alert status and feedback are visible to the business that issued the ticket.
• Integrations you connect: when a business links Square or Toast, ticket status may be sent back to that platform where it allows it.
• Authorities or successors: when the law requires it, to protect rights and safety, or as part of a merger or acquisition, subject to this policy.

Some providers may process data outside your province or state, including in the United States.

06How long we keep it

• Customer phone numbers: deleted 24 hours after the ticket is picked up, cancelled or expires.
• Push subscriptions: removed when the ticket closes or the browser revokes them.
• Tickets and ratings: kept while the business account is active so the business can see its history and insights.
• Account data: kept while the account is open, and deleted or de-identified within 90 days after closure, except what we must keep for tax, accounting or legal reasons.
• Security logs: kept for a limited period, typically up to 90 days.

07Your rights (US and Canada)

California (CCPA/CPRA): California residents can ask to know what personal information we hold, get a copy, correct it, or delete it, and can opt out of sale or sharing (we do neither). We will not discriminate against you for using these rights. You may use an authorized agent.

Other US states: residents of states with similar laws have comparable rights, and we honor them on the same terms.

Canada (PIPEDA and provincial laws): you can access the personal information we hold about you, ask us to correct it, and withdraw consent subject to legal or contractual limits. You can also complain to the Office of the Privacy Commissioner of Canada.

To make a request, email hello@kueues.com. If your request is about a business's customer data, we may forward it to that business and help it respond. We verify requests before acting on them.

08Security

We use encryption in transit, hash passwords and API keys, encrypt integration tokens at rest, and limit staff access to production data. No system is perfectly secure, so we also monitor for abuse and will notify affected users and regulators of a breach where the law requires.

09Cookies and storage

We use a small number of cookies and browser storage entries that are needed to keep you signed in, remember a staff device, and save preferences like the dark theme. We do not use third-party advertising cookies.

10Children

The Service is meant for businesses. Customer ticket pages are general-audience and collect no information beyond what is described above. We do not knowingly collect personal information from children under 13 for any other purpose.

11Changes to this policy

If we make material changes, we will update the date at the top and notify account owners by email or in the dashboard before the changes take effect.