Privacy Policy

How niroq handles personal information

Effective date: 19 October 2026 · Version 1.0

1. Introduction and Scope

This Privacy Policy explains how niroq Technologies Inc. ("niroq," "we," "us," or "our") collects, uses, discloses, stores, and otherwise processes personal information when you visit our website, contact us, create or administer an account, or use our business management software and related services (collectively, the "Services").

This Policy applies to website visitors, prospective customers, customer account administrators, authorized users, and other individuals whose information we process in operating our own business. It should be read together with any applicable contract, order form, and Data Processing Agreement ("DPA").

A business customer may upload or generate personal information about its own clients, staff, and contacts through the Services ("Customer Data"). In many cases, the customer determines why and how that information is processed, while niroq processes it to provide the Services on the customer's instructions. This Policy does not replace the customer's own privacy notice.

2. Who We Are

Controller for website enquiries, our own business contacts, account administration, and service security:

niroq Technologies Inc.
1900 Camden Ave
San Jose, CA 95124, United States
Contact: hello@niroq.me

3. Key Definitions

"Personal information" or "personal data" means information that identifies, relates to, describes, or could reasonably be linked to an individual, as defined by applicable law.

"Customer" means a business or other organization that enters into an agreement to use the Services. "Authorized User" means an individual the Customer permits to access its account. "Customer Data" means information submitted to or generated in the Customer's workspace through use of the Services.

"Process" or "processing" includes collecting, recording, organizing, storing, using, disclosing, transmitting, restricting, or deleting information.

4. Information We Collect

4.1 Information you provide

• Contact and enquiry details, such as name, email address, business type, and the contents of messages submitted through our website or sent to us.
• Account and organization details, such as business name, account owner or administrator details, user names, role assignments, branch or location settings, and authentication-related information necessary to operate accounts.
• Support communications, feedback, and information you choose to provide when asking for assistance.

4.2 Information processed through the Services

Depending on features enabled and how a Customer configures its workspace, Customer Data may include appointment details, client names and contact details, staff schedules, service records, notes, visit history, loyalty records, payment-status records, and branch-level operational information.

Customers are responsible for ensuring they have an appropriate legal basis and required notices or permissions before entering personal information into the Services. Customers should not submit sensitive personal information unless the relevant feature, agreement, and applicable law expressly permit it.

4.3 Technical and usage information

We may process device and browser information, IP address, log data, timestamps, pages or features accessed, error reports, and security events to maintain the website and Services, diagnose faults, prevent abuse, and protect accounts.

Cookies or similar technologies may be used for essential functionality and, where applicable, analytics or preference settings.

4.4 Information from third parties

We may receive information from service providers used to host, secure, support, or deliver the Services, and from integrations that a Customer chooses to connect.

5. How We Use Information

We use personal information to:

• Respond to enquiries
• Create and administer accounts
• Provide, maintain, and support the Services
• Authenticate users and enforce permissions
• Process Customer instructions
• Troubleshoot and improve reliability
• Communicate service, security, and administrative notices
• Detect fraud, misuse, and security incidents
• Comply with legal obligations
• Establish, exercise, or defend legal claims

We may use aggregated or de-identified information for analysis and service improvement where permitted by law and where the information is not used to identify an individual.

6. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following: performance of a contract; legitimate interests such as securing and improving the Services, responding to business enquiries, and preventing misuse; compliance with legal obligations; and consent where required.

Where niroq processes Customer Data on a Customer's behalf, the Customer is generally responsible for determining the legal basis for collecting and using that data. niroq processes such data in accordance with the applicable agreement and documented instructions.

7. Customer Data and Roles

For personal information that a Customer uploads about its clients, staff, or other contacts, the Customer will generally act as controller or business, and niroq will generally act as processor or service provider, where those roles apply under relevant law.

niroq may separately act as an independent controller for account administration, security logs, support communications, and its own business operations.

Customers must provide appropriate privacy notices, honor data-subject requests, set access permissions, and ensure their instructions to niroq are lawful.

8. Sharing and Disclosure

We may disclose information to:

• Service providers acting on our behalf
• Professional advisers, auditors, and insurers
• Authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security
• Parties involved in a merger, financing, acquisition, restructuring, or sale of all or part of our business, subject to applicable law

We do not sell personal information. Third-party integrations are governed by their own terms and privacy notices. Customers should review those terms before enabling an integration.

9. Integrations and Messaging

The Services may support integrations or communications tools, including WhatsApp-related functionality delivered through third-party providers. Availability and functionality may vary by account, region, provider approval, and product release.

If an integration is enabled, relevant data may be exchanged with the selected provider to deliver the requested functionality. The Customer is responsible for ensuring that it has the required permissions and complies with the provider's policies, including any rules for messaging, templates, consent, and opt-outs.

10. International Data Transfers

niroq Technologies Inc. is a United States company. Information may be processed in the United States or other countries where niroq or its service providers operate.

Where applicable law requires safeguards for international transfers, the parties will use a lawful transfer mechanism, such as an adequacy decision or approved contractual clauses, as appropriate.

11. Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining business records, resolving disputes, enforcing agreements, and meeting legal obligations.

Customer Data retention, export, and deletion are governed by the applicable Customer agreement and DPA, including any documented post-termination period.

12. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. Measures may include access controls, authentication, logging, secure development practices, and service-provider safeguards.

No system can be guaranteed completely secure.

13. Your Privacy Rights

Depending on your location and the applicable law, you may have rights to:

• Request access to, correction of, deletion of, or a copy of personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Complain to a supervisory authority

To make a request relating to information controlled by niroq, contact hello@niroq.me. We may need to verify your identity. We will respond in accordance with applicable law.

If your information is held in a Customer's workspace, contact that Customer first. niroq may assist the Customer as required by the applicable agreement and law.

14. US State Privacy Rights

Some US state privacy laws, including the California Consumer Privacy Act (CCPA), provide residents with specific rights regarding their personal information, including the right to know, delete, correct, and opt out of certain uses.

If you are a California resident and wish to exercise your rights under the CCPA, please contact us at hello@niroq.me.

15. EEA, UK and Other Regional Rights

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable data protection laws, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent local law, including the right to lodge a complaint with your local data protection authority.

For any requests or questions regarding your rights under these frameworks, please contact hello@niroq.me.

16. Children's Privacy

The Services are designed for business use and are not directed to children. Customers must not use the Services to knowingly collect children's personal information in violation of applicable law. If you believe information has been submitted unlawfully, contact hello@niroq.me.

17. Changes to This Policy

We may update this Policy to reflect changes in the Services, our practices, or legal requirements. We will update the effective date when a new version is published. Where required by law, we will provide notice or obtain consent for material changes.

18. Contact

Privacy questions and requests: hello@niroq.me

niroq Technologies Inc.
1900 Camden Ave
San Jose, CA 95124
United States