Privacy Policy URL: https://quiiq.com/privacy
This Privacy Policy describes how TICCO (The Indian Consultancy & Company) ("TICCO", "we", "us", or "our") collects, uses, discloses, and protects information when you use the QUIIQ SaaS platform, including our website at https://quiiq.com, the web application at https://app.quiiq.com(collectively, the "Platform" or "Service"), and integrations with Meta Platforms, Inc. ("Meta") products such as the WhatsApp Business Platform and Facebook Messenger (via a connected Facebook Page).
QUIIQ is a product developed and operated by TICCO (The Indian Consultancy & Company).
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
WhatsApp, Messenger, and Facebook are trademarks of Meta Platforms, Inc. QUIIQ integrates with Meta platforms (including WhatsApp Business Platform and Facebook Messenger) and is not affiliated with or endorsed by Meta Platforms, Inc.
1. Interpretation and definitions
Interpretation
Words with initial capital letters have meanings defined below. The same definitions apply whether they appear in singular or plural.
Definitions
- Account means a unique account created for you or your organization to access the Service.
- Business Customer means an organization or individual that registers for the Service to manage customer communications (including WhatsApp and Messenger), teams, automation, or related features.
- Company means TICCO (The Indian Consultancy & Company), 15A, City Vista, Tower A, Fountain Road, Kharadi, Pune 411014, Maharashtra, India.
- End User means a person who communicates with a Business Customer through WhatsApp, Messenger, or other channels connected to the Service.
- Meta Platform Datameans information processed through Meta products connected to the Service, including WhatsApp Business Platform data and Facebook Messenger data from a connected Facebook Page, subject to Meta's terms and policies.
- Personal Data means any information relating to an identified or identifiable individual.
- Service means the QUIIQ Platform and related support, billing, and API features.
- Service Provider / Subprocessor means a third party that processes data on our behalf to operate the Service.
- Usage Data means data collected automatically through use of the Service (for example, IP address, browser type, pages visited, timestamps, and diagnostic logs).
- You means the individual or legal entity using the Service, including Business Customers and authorized team members.
2. Information we collect
2.1 Account and profile data
When you register or manage an Account, we may collect:
- Name, email address, phone number, and job title
- Organization name, billing address, and tax or invoicing details
- Login credentials and authentication tokens
- Team member roles, permissions, and workspace settings
- Support communications and preferences
2.2 Meta platform data (WhatsApp and Messenger)
QUIIQ can connect Meta messaging channels so your organization can handle customer support conversations in one inbox. When you connect a channel, we process Meta Platform Data on your behalf as a technology provider.
2.2.1 WhatsApp Business Platform
If you connect a WhatsApp Business Account, data may include:
- WhatsApp Business Account and phone number identifiers
- Message content (text, media, documents, voice notes) and conversation history
- Contact names, phone numbers, and labels you assign in the Platform
- Message templates, approval status, and delivery analytics
- Webhook events, session data, and API logs related to WhatsApp messaging
2.2.2 Facebook Messenger (Facebook Page)
QUIIQcan connect a customer's Facebook Page for Messenger support inbox use. When that connection is enabled, data may include:
- Facebook Page ID
- Page access tokens (stored encrypted)
- Page-scoped user IDs (PSIDs)
- Message content and message metadata
- Display names and other profile fields Meta makes available for the conversation
How we use this Messenger data:to receive and send customer support messages in your organization's QUIIQ inbox, and to operate related inbox features (assignment, history, and support workflows) for that connected Page.
Retention and deletion for Messenger / Meta connections: we retain this data under Section 8. We also delete or stop processing it when (a) your organization disconnects the Facebook Page or Messenger channel in QUIIQ, (b) you or an End User submits a valid deletion request, or (c) Meta sends a Remove App / data deletion callback for the connection. Residual encrypted backups may persist for a limited period before automatic purging, as described in Section 8.
Not sold; not used to train public models: we do not sell Meta Platform Data. We do not use WhatsApp, Messenger, or other customer conversation data to train public third-party AI models. See Section 3.1 for how optional AI features are handled when you enable them.
Your use of Meta messaging features is also governed by Meta's terms, including the WhatsApp Business Terms of Service, WhatsApp Business Messaging Policy, Meta Terms of Service, and applicable Meta Platform Terms. You are responsible for obtaining any required consents from End Users and complying with applicable messaging, marketing, and data protection laws.
2.3 Customer content and operational data
Depending on how you use the Service, we may process:
- Chat assignments, notes, tags, and internal comments
- Automation rules, chatbot flows, and campaign configuration
- Files and media uploaded to or transmitted through the Platform
- Integration settings with third-party tools you connect
2.4 Usage data, logs, and cookies
We automatically collect Usage Data when you visit our website or use the Platform, including:
- IP address, device type, browser, operating system, and locale
- Pages viewed, features used, session duration, and referral URLs
- Security logs, error reports, and performance diagnostics
2.5 Cookies and similar technologies
We use cookies, local storage, and similar technologies to:
- Keep you signed in and maintain session security
- Remember preferences and workspace settings
- Measure usage, diagnose issues, and improve the Service
- Support analytics and, where permitted, marketing on our website
You can control cookies through your browser settings. Disabling certain cookies may limit Platform functionality. Where required by law, we will obtain consent before placing non-essential cookies.
2.6 Payment information
Subscription payments for QUIIQ are collected by TICCO as merchant of record and processed by payment aggregators such as Razorpay, Cashfree, and other processors we authorize. We receive billing status, transaction references, invoices, and limited payment metadata. We do not store full card numbers, UPI PINs, or complete bank credentials on our servers. Payment data handled by processors is governed by their privacy notices and security standards. Billing inquiries may be directed to billing@ticco.in. See our Refund and Cancellation Policy for cancellation and refund terms.
2.7 Sensitive information
Please do not submit special categories of personal data (such as health, biometric, or government ID data) through the Service unless you have a lawful basis and appropriate safeguards. If you choose to send such information, you are responsible for compliance with applicable law.
3. How we use personal data
We use Personal Data to:
- Provide, operate, maintain, and secure the Service
- Authenticate users and manage Accounts, teams, and permissions
- Enable Meta messaging channels, including WhatsApp Business Platform and Facebook Messenger Page inbox, templates where applicable, webhooks, and analytics
- Process subscriptions, invoices, and customer support requests
- Send service announcements, security alerts, and administrative messages
- Monitor usage, prevent fraud and abuse, and enforce our terms
- Develop new features and improve reliability and user experience
- Comply with legal obligations and respond to lawful requests
3.1 Artificial intelligence (OpenAI)
We plan to use OpenAI and similar providers to power optional AI features such as suggested message responses, content generation, classification, and training-related improvements. When enabled, relevant message or account content may be sent to OpenAI strictly to deliver the feature you request. We will not use your WhatsApp, Messenger, or other customer conversation data to train public third-party models. Optional AI features process data only to provide the requested feature under contractual data protection terms and our subprocessors list below.
4. Legal bases for processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process Personal Data when:
- Contract: processing is necessary to provide the Service you requested
- Legitimate interests: to secure, improve, and market the Service in a balanced way that respects your rights
- Consent: where you have given clear consent (for example, certain cookies or optional features)
- Legal obligation: where we must comply with applicable law
You may object to processing based on legitimate interests, restrict processing, or withdraw consent at any time where applicable. Contact us at support@quiiq.com to exercise these rights.
5. How we share personal data
We may share Personal Data with:
- Subprocessors listed in Section 6 who help us host, deliver, bill, or support the Service
- Meta when you use WhatsApp or Messenger integrations, as required to operate those Meta products for your connected business accounts and Pages
- Your team and End Users according to your workspace configuration and messaging activity
- Professional advisers (lawyers, auditors, insurers) under confidentiality obligations
- Authorities when required by law, court order, or to protect rights, safety, and security
- Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards
We do not sell Personal Data, including Meta Platform Data. We do not share End User phone numbers, PSIDs, or message content with other QUIIQ customers.
6. Subprocessors
We use trusted third parties to process data on our behalf. Our current subprocessors include:
- Amazon Web Services (AWS): cloud hosting, storage, and infrastructure
- Vercel: website and application delivery
- Razorpay: payment processing and billing
- Cashfree: payment processing and billing
- OpenAI (planned): AI-assisted messaging, content, and related features as described in Section 3.1
We require subprocessors to protect Personal Data through appropriate contractual and technical measures. We may update this list as our stack evolves; material changes will be reflected in this Policy.
7. International data transfers
Your information may be processed in India and other countries where we or our subprocessors operate. When we transfer Personal Data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures where required. Contact support@quiiq.com to request information about transfer mechanisms.
8. Data retention
We retain Personal Data for up to 24 months, or until you delete it or close your Account, whichever occurs earlier, unless a longer period is required by law, dispute resolution, security, or backup integrity.
For Meta messaging channels (WhatsApp and Messenger), we also delete or stop processing related connection and conversation data when your organization disconnects the channel in QUIIQ, when we complete a verified user deletion request, or when Meta sends a Remove App / data deletion callback for the app connection. After retention periods expire or deletion is triggered, we delete or anonymize data within a reasonable timeframe. Residual copies may remain in encrypted backups for a limited period before automatic purging.
9. Security
We implement technical and organizational measures designed to protect Personal Data, including encryption in transit, access controls, monitoring, and least-privilege access for personnel. No method of transmission or storage is completely secure; you are responsible for safeguarding your Account credentials and access to connected Meta accounts (including WhatsApp Business Accounts and Facebook Pages).
If a security incident materially affects your Personal Data, we will notify you and, where required, regulators without undue delay.
10. Your rights and choices
Depending on your location, you may have the right to:
- Access, correct, or delete Personal Data we hold about you
- Restrict or object to certain processing
- Data portability for information you provided
- Withdraw consent where processing is consent-based
- Lodge a complaint with your local supervisory authority
To exercise these rights, email support@quiiq.com or use our data deletion process below. We may verify your identity before responding.
10.1 Account and data deletion
You may request deletion of your Account and associated data by:
- Using the instructions on our Data Deletion page
- Emailing support@quiiq.com from your registered address
- Deleting data within the Platform where self-service tools are available
Deleting your QUIIQAccount, disconnecting a Facebook Page or WhatsApp account, or completing Meta's Remove App flow (which may trigger our data deletion callback) does not automatically delete all data held by Meta on Meta systems. You must also manage retention and deletion in accordance with Meta's policies and your obligations to End Users. We process Meta deletion callbacks and verified user requests as described in Sections 2.2.2 and 8 and on our Data Deletion page.
11. California privacy rights (CCPA / CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including:
- Right to know the categories and specific pieces of Personal Data collected, sources, purposes, and disclosures
- Right to delete Personal Data, subject to lawful exceptions
- Right to correct inaccurate Personal Data
- Right to opt out of sale or sharing (we do not sell Personal Data)
- Right to non-discrimination for exercising privacy rights
Submit verifiable requests to support@quiiq.com. We will respond within the timelines required by law. Authorized agents may submit requests with written permission or power of attorney as applicable.
We do not sell or share Personal Data for cross-context behavioral advertising. We do not honor "Do Not Track" browser signals because there is no uniform industry standard; you may manage cookies as described in Section 2.5.
12. Children's privacy
The Service is intended for users who are at least 18 years old. We do not knowingly collect Personal Data from anyone under 18. If you believe we have collected information from a minor, contact us at support@quiiq.com and we will take steps to delete it.
13. Third-party links and services
The Service may link to third-party websites or integrations we do not control. Their privacy practices are governed by their own policies. We encourage you to review Meta's and other providers' policies before connecting integrations.
14. Changes to this privacy policy
We may update this Privacy Policy from time to time. We will post the revised version at https://quiiq.com/privacyand update the "Last updated" date. For material changes, we may notify you by email or in-product notice. Continued use after changes become effective constitutes acceptance of the updated Policy.
15. Contact us
For privacy questions, requests, or complaints, contact:
- Email: support@quiiq.com
- Mail: TICCO (The Indian Consultancy & Company), 15A, City Vista, Tower A, Fountain Road, Kharadi, Pune 411014, Maharashtra, India
- Data deletion: https://quiiq.com/data-deletion
By using QUIIQ, you acknowledge that you have read and understood this Privacy Policy.