Privacy Policy

This Privacy Policy describes how ConferIQ (“we”, “us”, “our”) handles personal data when you use our web application and related services (the “Service”). This is a draft for review — please update it with your legal adviser before publication.

1. Who we are (controller & contact)

Under the EU General Data Protection Regulation (GDPR), you must be able to identify the data controller and how to contact them. ConferIQ is a business intelligence workspace for authorised users.

Full provider details are in our Legal notice page.

2. What data we process

Depending on how you use the Service, we may process:

• Account data — name, work email, role, access permissions, and authentication records.
• Usage data — sign-in times, actions within the app, and technical logs needed for security and support.
• Business content — information you or your organisation enter or import into the workspace (e.g. organisations, events, contacts, notes, and pipeline-related records).
• Communications — messages you send to us (e.g. support or account requests).

3. Why we process data

We use personal data to:

• provide and maintain the Service;
• authenticate users and enforce access controls;
• operate features you choose to use within the workspace;
• protect security, prevent abuse, and troubleshoot issues;
• comply with legal obligations; and
• improve the Service where permitted (including optional analytics if you consent to cookies).

4. Legal bases (EEA / UK)

Where applicable law requires a legal basis, we rely on: performance of a contract or pre-contractual steps; legitimate interests in operating a secure B2B platform; compliance with legal obligations; and consent where required (e.g. non-essential cookies).

5. Sharing and processors

We do not sell personal data. We may share data with infrastructure and service providers who host or support the platform (e.g. hosting, email delivery, identity providers you enable), subject to appropriate safeguards. We may disclose data if required by law or to protect rights and safety.

6. International transfers

Data may be processed in countries outside your own. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

7. Retention

We keep data only as long as needed for the purposes above, including while your account is active and for a reasonable period afterwards for backups, audit, and legal compliance. Your organisation may have its own retention rules for business content stored in the workspace.

8. Security

We apply technical and organisational measures appropriate to a business application, including access controls, encrypted transport (HTTPS), and monitoring. No system is completely secure; please use strong credentials and report suspected incidents to [email protected].

9. Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, object, or port your data, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. To exercise rights, contact [email protected].

10. Children

The Service is intended for professional users and is not directed at children.

11. Changes

We may update this policy from time to time. Material changes will be indicated by updating the “Last updated” date below.

12. Contact & complaints

Privacy questions and requests to exercise your rights: [email protected].

You may also contact the supervisory authority listed in section 1. See Legal notice for full contact and company details.