Privacy Policy

Data we collect

• Account data: name, work email address, company name and password (passwords are stored hashed by our authentication provider).
• Workspace data: quality records you or your colleagues enter — inspections, measurements, photos, NCRs, CAPAs, documents, supplier and customer records.
• Customer-portal data: contact details and messages submitted by your customers through the portal.
• Technical data: IP address, browser and device type, and server logs needed to operate and secure the service.
• Cookies and local storage: required for sign-in sessions, theme preference, offline inspections and the install-app prompt. Analytics cookies are used only if analytics is enabled, as described below.

How we use data

We do not sell personal data and we do not use workspace data for advertising.

• To provide, secure and support the QCIN service and your workspace.
• To send service emails such as notifications, escalations and account messages.
• To understand aggregate website usage and improve the product (only if analytics is enabled).
• To meet legal obligations and resolve disputes.

Service providers

We use the following processors to run QCIN. They process data on our instructions:

• Supabase — database, authentication and file storage.
• Vercel — website and application hosting.
• Google — email delivery for notifications (Gmail SMTP) and, if enabled, Google Analytics for website usage statistics.
• Instamojo — payment processing, once online payments are enabled. We never receive or store full card details.

Data ownership and retention

Your company owns the workspace data it enters. We keep it while your account is active. After an account is closed we delete or anonymise workspace data within 90 days unless a longer period is required by law; you can request an export before closure.

Security

Data is encrypted in transit (HTTPS). Access is role-based and company data is isolated using database row-level security. No system is perfectly secure; we will notify affected users and authorities of a personal data breach as required by law.

Your rights

You may request access to, correction of, or erasure of your personal data, withdraw consent where processing is based on consent, and nominate another person to exercise your rights. Write to lumacore88@gmail.com. You may also contact our Grievance Officer (see the Grievance Redressal page) and, if unresolved, approach the Data Protection Board of India.

Children

QCIN is a business service and is not intended for anyone under 18.

Changes and contact

We will post changes on this page and update the date below; material changes will be notified by email or in the app.

[Registered business name — to be added], [Registered address — to be added]. Email: lumacore88@gmail.com. Phone: [Support phone — to be added].