Qonversion Privacy Policy

Your privacy is important to us, and we are committed to protecting your personal data. We want you to feel confident when using the Qonversion service and comfortable with how your data is used.

• We are committed to being transparent about the information we collect, how we use it, and how you can control the collection, correction and/or deletion of the information.
• We believe that you should have control over the data you transmit to Qonversion. We will never share your data without your permission (unless required by law) and will provide you with a clear means to be able to delete your data from our systems.
• We believe that you own and will always own all data you upload to the Qonversion Service. We will never claim ownership rights to any of your data and only ask you to grant us the rights necessary to provide the service.

Qonversion is a Software as a Service platform that can be used by mobile app owners, mobile app developers, or anyone else ("you", "your", "customers") who can be interested in the provided service. By using this service, you agree to allow us to collect and process information as described below. If you have any questions or believe that some data has been transmitted into Qonversion that should not have been, please contact us at compliance@qonversion.io.

Information We Collect

• Log-in Information: If you create a Qonversion account, you provide your email address, name and create a password that we store so you can access and use the Qonversion service.
• Website Use Information: We use tools (including Google Analytics) to collect information from visitors in order to better understand how they use our website (e.g., browser type, domains, page views), and Google Ads conversion tracking to measure how our advertising performs. Depending on your region, these tools run only with your consent — see the "Cookies and Similar Technologies" section below for details and controls.
• Team Account Information: If your User Account is linked to a Team Account, the administrator of the Team Account will be able to see your name, user name and other personally identifiable information. Your organization's privacy policy and terms, not Qonversion's, will apply to their use and storage of your information.
• Purchase Information: If you purchase paid features of the Qonversion service, we collect your name, billing address and any other information necessary to complete the transaction. Payment card details are collected and processed by our payment processor, Stripe; we do not store full card numbers on our systems.

Cookies and Similar Technologies

We use cookies on our websites (qonversion.io and dash.qonversion.io) for three purposes:

• Strictly necessary: session cookies that keep you logged in, and the q_consent cookie that remembers your cookie choice.
• Analytics: Google Analytics (loaded via Google Tag Manager) to understand how visitors use our website.
• Advertising measurement: Google Ads conversion tracking, including first-party cookies that may store a Google click identifier to attribute sign-ups to our advertising.

If you visit from the United Kingdom, the European Economic Area, or Switzerland, analytics and advertising cookies are off by default. We ask for your consent via a banner before setting them, and we use Google Consent Mode so that no analytics or advertising cookies are set if you decline. Your choice is stored for 12 months in the q_consent cookie and applies across qonversion.io and dash.qonversion.io. You can change your choice at any time via the "Cookie settings" link in the website footer. In other regions, we rely on our legitimate interest in analytics and advertising measurement; you can opt out via your browser settings or the Google Analytics opt-out.

The main cookies we set are:

• q_consent — stores your cookie choice (12 months)
• _ga, _ga_* — Google Analytics (up to 24 months)
• _gcl_aw — Google Ads click attribution (90 days)
• q_gclid, q_gl — first-party copies of the Google Ads click identifier used to attribute sign-ups to our advertising (90 days)
• Session cookies — keep you logged in to the dashboard (expire when you close your browser)

End User Technical Information

End user technical information can be received and processed by us if you are using Qonversion Software Development Kit ("SDK") or other Qonversion products and services. We collectively refer to such information as the "End User Technical Information". The End User Technical Information includes:

• End user's mobile device type, operating system and version number
• IP address
• Advertiser ID
• App version
• Carrier
• Country
• Locale
• Time zone
• Device push token
• Qonversion SDK version
• Apple receipt file
• Google purchase token
• End user's transaction information in your mobile or web app
• Time end user's last used your app
• If you choose to enable User Properties information, you might send any additional metadata associated with a user.

Usage

We may use information that we collect about you, including personal information, to:

• Provide the Qonversion service: We will use your information to provide the Qonversion service to you; to manage your account; to respond to your inquiries; and for other customer service and support purposes. We use the payment information you provide to us in order to alert you of past, current, and upcoming charges and to perform internal finance processes.
• Understand and improve upon our products: We will perform research and analysis about your use of, or interest in, our products, services, or content. We do this to help make the Qonversion Service better and to develop new products.
• Aggregated Data: Qonversion may use information derived from the aggregation of End User Technical Information for research and analytics purposes and improvement and marketing of the Services. Aggregated Data shall be anonymous and in no way reveal the identity of the customer or any end user.
• Communicate with you: Service-related communications, promotional emails (subject to opt-out), responding to your requests, and administrative notices.
• Protecting Rights and Interests: We will use your information to protect our rights and interests, as well as the rights and interests of our users.
• Legal Compliance: We may use your information to comply with applicable legal or regulatory obligations.

Transfer

We may share your personally identifiable information with third parties for purposes of providing you with Qonversion services. These third parties may use your information to perform services on our behalf and to offer you other products or services that may be of interest to you. Except as described herein, Qonversion will only provide personally identifiable information collected on the website to a third party if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws or respond to a court order, subpoena, or search warrant.

Where We Store Your Information

The information we collect from you is stored in Google Cloud Platform and DigitalOcean data centres located in London, United Kingdom. Our website is served through Cloudflare's global network. Our infrastructure providers hold industry-standard certifications, including SOC 2 Type II and ISO 27001.

Legal Basis

We rely on the following legal grounds to process your personal information:

• Consent: We may use your personal information as described in this Policy subject to your consent. To withdraw your consent, please contact us at compliance@qonversion.io.
• Performance of a Contract: We may need to collect and use your personal information, as applicable, to perform our contractual obligations to you.
• Legitimate Interests: We may use your personal information for our legitimate interests to provide and improve upon the Qonversion Service.

Your Rights and Choices

• Account: In order to keep your personal information accurate and complete, you can log in to review and update your account information, including contact and billing information, via your account settings page. You may also contact us to request information about the personal data we have collected from you and to request the correction, modification or deletion of such personal information.
• Email: If you do not wish to receive promotional emails from us, you may opt-out at any time by following the opt-out link contained in the email itself or by emailing us at compliance@qonversion.io.
• Cookies: You can give, refuse or withdraw your consent for non-essential cookies at any time via the "Cookie settings" link in the website footer. You can also control cookies through your browser settings — your browser's help function contains instructions on how to accept all cookies, be notified when a cookie is issued, or refuse cookies entirely.
• Additional Rights: Subject to local law, you may have additional rights under the laws of your jurisdiction regarding your personal data, such as the right to complain to your local data protection authority.

GDPR

• Qonversion has no direct agreement with customers' end users. Customers are responsible for ensuring that Users' Personal Information has been collected in accordance with applicable law.
• Qonversion's Customers install a Software Development Kit ("SDK") on their mobile app(s) and site(s). The SDK facilitates the transfer of User Personal Information to Qonversion so that Qonversion can provide service to the Customers.
• Qonversion only receives User Personal Information that Customers have provided us for the business purposes of providing the Services.

EU (European Union) individuals have rights in relation to their personal data, which is processed by Qonversion. If you are an EU data subject, you may by emailing us at compliance@qonversion.io:

• Request access to the personal data concerned.
• Request that any incorrect personal data about you that we are processing be rectified.
• Request that we erase the personal data concerned.
• Withdraw your consent at any time where we are processing personal data relating to you on the basis of your prior consent.
• Lodge a formal complaint with your local supervisory authority — the Information Commissioner's Office (ICO) if you are in the United Kingdom, or the data protection authority of your EU member state.

CCPA

Qonversion acts as a Service Provider under the California Consumer Protection Act ("CCPA"). Qonversion follows the Customer(s)' instructions in processing the User Personal Information for the business purposes of providing the Services. Qonversion follows the Customer(s)' instructions to delete any User Personal Information requested. Qonversion does not sell its Users' Personal Information as defined under CCPA. Qonversion upholds Users' right to non-discrimination as defined under CCPA.

Security

Qonversion takes security very seriously. We use commercially standard methods to transmit your content securely, including HTTPS, SSL, and 128-bit encryption.

Qonversion's core infrastructure is hosted in London, United Kingdom. We use the following sub-processors to operate the service:

• Google Cloud Platform — application hosting (London, UK)
• DigitalOcean — databases and file storage (London, UK)
• Cloudflare — website hosting, DNS and traffic protection
• Stripe — payment processing
• Google (Analytics, Tag Manager, Ads) — website analytics and advertising measurement
• Meta — advertising measurement
• Intercom — customer support and messaging
• Amplitude — product analytics
• Twilio SendGrid — transactional email
• n8n — internal workflow automation

Children Under 13

The Qonversion service is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from such children. If you are a parent or guardian of a child under the age of thirteen (13) and you believe your child may have provided us with personal information, please notify us at compliance@qonversion.io.

Business Transitions

Upon the sale or transfer of the company and its assets, we will require a purchaser to treat our data under the privacy statement in place at the time of its collection.

Changes to Privacy Policy

Please note that this Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. If we decide to change our privacy policy, then we will post those changes to this Privacy Notice and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. We will also keep prior versions of this Privacy Policy in an archive for your review.

Questions, Concerns and Comments

If you have any questions regarding our privacy policy, please contact us:

Qonversion Inc.
1160 Battery Street East
Suites 100
San Francisco
94111

Email: compliance@qonversion.io