This policy explains how YouZag, Inc. (“AltQ”, “we”, “us” or “our”) collects, uses and shares personal information when you visit this website (altq.app), use the AltQ web app at my.altq.app, or use the AltQ desktop app (together, the “Service”).
1. Who we are and our role
YouZag, Inc. makes AltQ. You can reach us at support@altq.app or at 1127 Lake Legro Ct, Orlando, FL 32835, United States.
AltQ is used by organizations, such as dealerships. Each organization decides what goes in its catalogs and who can use them. For information an organization puts into AltQ, and for information about the people it adds, we act as that organization’s service provider (sometimes called a “processor”): we handle it on the organization’s behalf and according to our agreement with it. If you use AltQ through your employer, your questions about that information may be best answered by your organization’s AltQ admins, and we’ll help them respond.
For information about visitors to this website, people who create accounts, and billing contacts, we decide how the information is used, and this policy describes what we do.
2. Information we collect
Information you give us
- Account information: your email address, and your name if you add one or if Google provides it.
- Organization information: your organization’s name, the email addresses of people invited to it, their roles, and who invited them.
- Content: the catalogs, items, documents and other material your organization adds. We don’t control what’s in it, but our terms ask organizations not to store sensitive information such as payment card numbers, government ID numbers or their customers’ financial information.
- Messages you send us, such as support emails, and anything you include in them, such as the support details the desktop app can copy for you.
Information from Google sign-in
If you choose “Continue with Google”, Google shares your name, email address, profile picture address and a Google account identifier with us. We use the email address to identify your account and may show your name in the web app. We don’t use the picture. We don’t ask for access to your Gmail, Google Drive, contacts, calendar or any other Google data.
Information from the desktop app
- When a computer signs in: its device name (for example “FRONT-DESK-2”), operating system, app version, and when it last synced. We store a one-way hash of the device’s sign-in token, never the token itself.
- Seats: which signed-in computer uses a seat in which organization, the email address of the person who signed it in, and since when.
- Error reports, unless you turn them off in the app’s settings: the app and its version, the operating system family, the error’s name and code, and where in AltQ’s code it happened. Reports never include inserted text, catalog content, your name or your device, and they aren’t linked to your account.
The desktop app does not collect your keystrokes, your screen, window titles or contents, files from other programs, or anything from your dealer management system. To decide how to insert text, it looks at the name of the active program (such as chrome.exe) and the position of the text cursor on your computer, and it keeps a small log on your computer that never contains inserted text. That log leaves your computer only if you choose to send it to us.
Billing information
Payments are handled by Stripe. When your organization subscribes, Stripe collects the payment details and billing address, and we receive and store the billing email address, Stripe’s customer and subscription identifiers, the plan, the number of seats and the subscription’s status. We never see or store full card or bank account numbers. Stripe’s use of your information is described in Stripe’s privacy policy.
Information collected automatically
- This website uses no cookies, no analytics, no advertising and no third-party scripts. Our hosting provider (Google Firebase Hosting) and our DNS provider (Cloudflare) process your IP address and basic request information, such as the page requested and your browser type, to deliver pages and protect against abuse.
- The web app keeps you signed in using your browser’s storage, which it needs to work. It uses no advertising or analytics cookies.
- Service logs: our servers record requests, their outcomes and errors, without the content of catalogs, sign-in tokens or payment details.
- Activity history: within an organization, AltQ records who changed what and when (without the content itself), so that organizations can see the history of their catalogs.
- Trial records: to give each email address one free trial, we keep a one-way hash (SHA-256) of the address that started an organization’s trial. Because the hash of a known address can be matched, we treat it as personal information.
3. How we use information
We use personal information to:
- provide the Service: sign you in, deliver your organization’s catalogs to its computers, count seats and run trials and subscriptions;
- send messages about the Service, such as sign-in links, invitations, access notices, receipts, renewal reminders, and notices of changes to the Service or these policies;
- answer your questions and provide support;
- keep the Service secure and prevent fraud and abuse, for example by limiting free trials and the number of emails an organization can send;
- find and fix errors, and keep the Service reliable;
- comply with the law and enforce our terms.
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We don’t use it to show ads. We don’t use your organization’s content to train AI models. We don’t send marketing email unless you ask us to.
4. Google user data
AltQ’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the information Google shares at sign-in only to sign you in and to identify your account, and we don’t transfer it to others except as needed to provide the Service, for security, or to comply with the law.
5. How we share information
We share personal information only as follows:
- Within your organization. Your organization’s owners and admins can see your email address, name, role, your signed-in computers and the seats they use, and the activity history entries that name you. The person who invited you is shown in invitations.
- With service providers who process it for us under contracts that limit its use to providing their service to us:
| Provider | What it does for AltQ | Location |
|---|---|---|
| Google (Firebase, Google Cloud) | Hosting, database, file storage, sign-in, sign-in emails, logs | United States |
| Stripe | Payments, subscriptions, invoices and the billing portal | United States |
| Cloudflare | DNS for altq.app, and forwarding email sent to support@altq.app | United States and its global network |
| Resend | Sending invitation and access emails | United States |
- For legal reasons, when we believe in good faith that the law requires it, or to protect the rights, property or safety of our users, the public or AltQ.
- In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy.
- With your consent or at your direction.
We’ll update this list before we start using a new service provider that receives personal information.
6. How long we keep information
| Information | How long |
|---|---|
| Your account, memberships and signed-in computers | Until you delete your account, or you’re removed from the organization or the computer is signed out. A computer that hasn’t checked in for 30 days is signed out automatically |
| Your organization’s content | Until the organization deletes it. Deleted items can be restored for 30 days |
| Activity history | 400 days |
| Emails we send (invitations and access notices) | 30 days |
| Service logs and error reports | 30 days |
| Subscription records | Until the organization or account they belong to is deleted. Stripe keeps its own payment records as the law requires |
| Trial records (hashed email addresses) | Kept after an account is deleted, so a deleted account can’t start a second trial |
| Support emails | As long as needed to help you, and no longer than three years |
| Backups | Up to 14 weeks, then deleted |
Backups. So that we can recover from a failure or a mistake, we keep a daily backup of our database for 14 weeks, and earlier versions of stored files for 30 days. This means that information removed from AltQ, including with Delete my account, can remain in these backups for up to 14 weeks before it’s gone for good. We use backups only to restore the service, never for any other purpose.
7. How we protect information
All traffic to and from AltQ is encrypted with HTTPS, and Google encrypts stored data at rest. Access to each organization’s data is checked on our servers for every request. There are no AltQ passwords to steal. Our security page has the details. No system is perfectly secure, but we work to protect your information and will tell affected organizations promptly if we confirm a security incident that involves their data.
8. Your choices and rights
Download or delete your data. In the web app, open Account. Under Your data, Download my data gives you a copy of what AltQ stores about you, and Delete my account deletes your account and the data tied to it, as described on our security page. You can also email us.
Correct your information. Email us and we’ll correct it. Your organization’s admins can also change your role or remove you.
Error reports. You can turn them off in the desktop app’s settings.
Rights under state privacy laws. Depending on where you live, including California, you may have the right to know what personal information we have about you and how we use it, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing for targeted advertising (we don’t do either). We won’t treat you differently for exercising these rights. You may use an authorized agent, and we may ask you or your agent to verify your identity, usually by confirming your email address.
Rights in the European Economic Area, the United Kingdom and Switzerland. If these laws apply to you, you may also object to or restrict certain processing, and ask for your information in a portable format. We rely on these legal bases: performing our contract with you or your organization; our legitimate interests in running, securing and improving the Service; complying with the law; and your consent, where we ask for it. You may complain to your local data protection authority.
To exercise any of these rights, email support@altq.app. We’ll respond within 30 days, or sooner if the law requires. If your request concerns information an organization controls, we may refer it to that organization or help it respond.
9. Where information is stored
We store and process information in the United States. If you use AltQ from elsewhere, your information is transferred to the United States, where the law may protect it differently than where you live.
10. Children
AltQ is a tool for businesses and isn’t directed to children. We don’t knowingly collect personal information from anyone under 16. If you think we have, email us and we’ll delete it.
11. Changes to this policy
We may update this policy as AltQ changes. We’ll post the new version here and change the date at the top. If a change is material, we’ll also tell account holders by email or in the web app before it takes effect.
Contact
Questions or requests about privacy:
YouZag, Inc.
1127 Lake Legro Ct
Orlando, FL 32835
United States