Privacy Policy

This Privacy Policy explains how Qvently, a service operated by Oinhuu LLC ("Qvently", "we", "us"), collects, uses, and shares information when you use our platform at qvently.com (the "Service"). It applies both to agencies and their staff who create accounts, and to event visitors who scan a QR badge and submit their details through the public rating/lead form — even though visitors never create an account with us.

1. Information we collect

From agency admins and workers (account holders):

• Name, email address, and password (stored securely and hashed — we never see your plain-text password)
• Job title and, if uploaded, a profile photo
• Event and organization details you create (event names, venues, brochures, form configurations)
• Billing information — handled entirely by our payment processor, Paddle (see Section 3)

From event visitors (public scan/rating flow):

• Name, email address, and phone number, if you choose to provide them on the lead-capture form
• Your star ratings and any written feedback
• Responses to any custom form fields the agency configured for that event
• Basic technical data about the scan (timestamp, browser user-agent) used only for scan-count analytics

2. How we use this information

• To operate the Service — creating your account, running events, generating QR badges, and recording leads
• To send transactional emails, such as low-rating alerts to event managers or performance warnings to workers
• To process payments and allocate event credits to the correct organization
• To maintain the security and integrity of the Service

We do not sell personal information, and we do not use visitor data collected on behalf of an agency for our own marketing purposes.

3. How information is shared

We share data with a small number of service providers who help us run Qvently:

• Supabase — our database, authentication, and file storage provider. All account data, event data, and uploaded files (brochures, photos) are stored on Supabase's infrastructure.
• Paddle.com Market Limited — our payment processor and Merchant of Record. Paddle handles all payment details directly; Qvently never receives or stores your card information. Paddle's own privacy policy governs how they process payment data.
• Resend — our transactional email provider, used solely to deliver alert and warning emails generated by the Service.

We do not share personal information with any other third party except where required by law.

4. Data retention

We retain account and event data for as long as your organization's account is active. Lead and rating data collected from event visitors is retained by the agency that collected it and can be deleted at the agency's request. You may request deletion of your own account data at any time by contacting us (Section 8).

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise any of these rights, contact us using the details below. If you are an event visitor and want your submitted information removed, you can also ask the agency whose badge you scanned, since they control that data within the Service.

6. Cookies

We use only the essential cookies required to keep you signed in (managed by Supabase Auth). We do not use advertising or cross-site tracking cookies.

7. Children's privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under 16.

8. Contact us

Questions about this policy or your data can be sent to support@qvently.com.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

This is a general template and does not constitute legal advice. Before relying on it, have it reviewed by a lawyer familiar with the privacy laws that apply to your business and customers (e.g. GDPR, CCPA), and replace any bracketed or placeholder details with your actual registered business information.