Privacy Policy

Introduction

This Privacy Policy explains how qiibee ag, Alpenstrasse 7, 6300 Zug, Switzerland ("qiibee", "we", "us") collects, uses, discloses, and protects personal data in connection with your access to and use of qiibee's websites, software, and related APIs and integrations (together, the "Software").

By visiting our websites or using our Software, you acknowledge that you have read and understood this Privacy Policy.

This Policy complies with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data Controller and Contact

The controller of your personal data is:

qiibee ag
Alpenstrasse 7
6300 Zug, Switzerland

Email: privacy@qiibee.com

If you have any questions or requests about this Privacy Policy or your personal data, please contact us at the address above.

Scope and Audience

This Privacy Policy applies to:

• Visitors of qiibee.com and related websites
• Registered users of qiibee's Software
• Individuals interacting with qiibee on behalf of corporate partners (e.g. account administrators, team members, or integration users)

For processing performed on behalf of customers concerning their end users (for example, members of a loyalty programme), qiibee acts as a data processor under the terms of the Data Processing Addendum (DPA).

Categories of Personal Data Collected

qiibee collects the following categories of personal data, depending on how you interact with us:

• Account and Business Information – company name, address, VAT number, user names, job titles, email addresses, telephone numbers.
• Login and Authentication Data – login credentials, user IDs, and activity logs.
• Transactional Data – details related to issued or redeemed loyalty currencies, partner identifiers, balances, payment references, or top-up history.
• Technical Data – IP addresses, browser type, operating system, access times, device identifiers, and API request logs.
• Communication Data – messages or correspondence sent through our support or onboarding channels.
• Marketing and Preference Data – newsletter subscriptions, marketing consent status, and engagement metrics.

qiibee does not intentionally collect or process special categories of personal data (sensitive data) such as political opinions, religion, or health information.

How We Collect Personal Data

We collect personal data from:

• Direct submissions – when you create an account, fill out forms, or contact us.
• Automated means – through cookies, analytics tools, and logs when you access the Software.
• Partners and integrations – when a customer connects external systems (e.g. Shopify, PMS, POS, or CRM) to our Software.
• Public sources – limited company data for business verification and compliance purposes.

Purpose and Legal Basis for Processing

We collect personal data from:

• Provision and improvement of the Software – Contract performance (Art. 6(1)(b) GDPR)
• User registration, authentication, and account access – Contract performance
• Payment processing, invoicing, and transaction settlements – Contract performance; Legal obligation
• Security monitoring, fraud detection, and compliance – Legitimate interest; Legal obligation
• Customer support and communication – Contract performance
• Product updates and marketing communications – Consent (Art. 6(1)(a) GDPR) – you may withdraw consent at any time by emailing privacy@qiibee.com
• Accounting, tax, and regulatory compliance – Legal obligation
• Anonymised usage analytics – Legitimate interest

Where we rely on consent, you may withdraw it at any time by emailing privacy@qiibee.com.

Cookies and Tracking

qiibee uses cookies and similar technologies to:

• Enable secure login and authentication
• Remember session preferences
• Measure usage analytics and improve the user experience

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of the Software.

For analytics, qiibee uses tools such as Google Analytics and Hotjar with IP anonymisation enabled. For error monitoring and performance tracking, qiibee uses AppSignal, which may process user identifiers and technical session data to identify affected users.

Data Sharing and Disclosure

We share personal data only when necessary for the operation of the Software or where required by law.

Sub-processors – trusted third parties that support hosting, analytics, and payments:

• Amazon Web Services (AWS) – hosting and infrastructure
• Stripe Payments Europe Ltd. – payment processing
• Hubspot Inc. – customer support
• Google Ireland Ltd. – cloud analytics
• Hotjar Ltd. – anonymised product analytics
• AppSignal B.V. – application performance monitoring and error tracking (processes user identifiers and technical session data)
• Atlassian (Jira Service Management) – customer and partner support ticketing (processes names, email addresses, and issue-related correspondence)

Professional Advisors – accountants, auditors, and legal counsel, under confidentiality obligations.

Authorities – when required by Swiss or applicable law, court order, or regulatory request.

We never sell personal data to third parties. A full list of current sub-processors is available upon request at privacy@qiibee.com.

International Data Transfers

qiibee stores and processes personal data primarily in Switzerland and the European Economic Area (EEA).

Transfers to other countries are made only:

• To jurisdictions recognised as adequate by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the European Commission; or
• Under Standard Contractual Clauses or equivalent safeguards.

Data Retention

We retain personal data for as long as necessary to:

• Provide the Software and fulfil contractual obligations
• Comply with legal and accounting requirements
• Resolve disputes and enforce agreements

When data is no longer required, it will be securely deleted or anonymised.

Your Rights

Subject to applicable law, you have the following rights:

• Access – to request confirmation and a copy of your personal data.
• Rectification – to correct inaccurate or incomplete data.
• Erasure – to request deletion when data is no longer necessary.
• Restriction – to limit certain processing under defined circumstances.
• Portability – to receive a copy in a structured, machine-readable format.
• Objection – to object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact privacy@qiibee.com.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

Data Security

qiibee uses appropriate technical and organisational measures to protect personal data, including:

• Encryption in transit and at rest
• Role-based access control and multi-factor authentication
• Regular security assessments and audits
• Continuous monitoring for unauthorised access or anomalies

Children's Data

The Software and related services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

Links to Third-Party Sites

Our websites and Software may contain links to third-party websites or integrations. qiibee is not responsible for their privacy practices or content. We recommend reviewing their privacy policies before providing personal data.

Changes to this Privacy Policy

qiibee may update this Privacy Policy from time to time. All changes will be published on qiibee.com with an updated "Last Updated" date. Significant changes will be communicated to registered users through the Software.

Relationship with Other Legal Documents

This Privacy Policy is complemented by the qiibee Software Licensing Agreement, the Data Processing Addendum (DPA), and any commercial agreements executed within the Software.

If there is a conflict between this Policy and the DPA or the Software Licensing Agreement, the latter documents prevail to the extent of that conflict.

Contact

For questions about this Privacy Policy or your data, please contact us at privacy@qiibee.com.