What Data We Collect
From you: Your name, email, phone, business address, and payment info.
From your customers: Their names, emails, phone numbers, and service history. This lives in your CRM.
Usage data: How you use the app. This means logins, which features you use, your IP address, and your browser type.
Automatic data: Login cookies and basic usage stats.
How We Use Your Data
- Provide the CRM, website, and scheduling tools
- Send billing invoices and receipts
- Send service notifications (review requests, payment reminders)
- Improve our product (usage analytics, error tracking)
- Comply with the law
What we don't do:
- We don't sell or share your business data
- We don't use customer data for targeted advertising
- We don't train AI models on your data without consent
AI & Automated Decision-Making
We use AI in two places:
1. Monthly Customer Report (AI-generated)
- What it does: sums up your bookings, review scores, and customer activity
- Data used: your CRM records — contacts, notes, finished jobs
- Why it helps: gives you tips to grow your business
- Turn it off: use Settings. You'll stop getting the monthly summary.
2. Automatic Review Requests
- What it does: texts or emails a review request once a job is done
- Data used: the job's completion date, plus the customer's email or phone
- Why it helps: gets you more online reviews
- Turn it off: use Automation settings. Or turn it off for just one customer.
Third-Party Services (Who We Share With)
Data Retention & Deletion
- Audit logs: kept 90 days, then deleted automatically
- Backups: kept 7–30 days by Supabase
- Billing records: kept 5 years, as tax law requires
- Customer data: deleted 30 days after you close your account
You can export all your data as a CSV file anytime. Ask us to delete your account, and it's gone for good in 30 days.
Your Rights (GDPR & CCPA)
You have the right to:
- Access — get a copy of all your data
- Correct — fix wrong information
- Delete — ask us to delete it (gone for good after 30 days)
- Export — download your data as a CSV file
- Opt out — turn off AI reports or review requests
To use these rights, email legal@qcyphertech.com. We reply within 30 days.
Cookies & Tracking
We use very few cookies. They're only for login. We don't track you with ad pixels. We don't use third-party analytics. Google Business Profile and Stripe may set their own cookies — check their own privacy pages for that.
Security
Your data is locked with encryption, both while it travels and while it sits in our database. Only approved staff can access it, based on their role. We log every access, and we delete old logs after 90 days.
See our full Security page for more.
Children's Privacy
QCypher is not for anyone under 18. We don't knowingly collect data from kids. If we find out we did, we delete it right away.
Changes to This Policy
We update this page once a year, or sooner if our practices change. We'll email you about any big changes.
Contact
Questions about your data? Email legal@qcyphertech.com.
We reply within 5 business days.
