Privacy Policy

This Privacy Policy describes how LoQal (“LoQal”, “we”, “us”, or “our”) collects, uses, shares, and protects information in connection with the LoQal FranX franchise customer relationship management (CRM) application, available as a mobile app (app id ai.loqal.franchise) and on the web at https://fx.loqal.ai (collectively, the “Service”). LoQal FranX is a business-to-business (B2B) product intended for use by franchise networks, their staff, and partners.

1. Information we collect

• Account information. When you register or are invited to the Service, we collect information such as your name, email address, phone number, organization, role, and authentication credentials.
• Device contacts you import. If you choose to import contacts from your device or other sources into the CRM, we collect and store the contact details you import (such as names, phone numbers, email addresses, and related notes) so you can manage them as leads and relationships. We access your device contacts only with your permission and only for the contacts you elect to import.
• Leads, accounts, and CRM content. We collect the business records you create and manage in the CRM — leads, contacts, companies, deals, brands, notes, tasks, meetings, and any documents or attachments you add — so you can run your franchise pipeline.
• Communication metadata. When you record or log communications in the CRM — for example call, SMS, WhatsApp, or email logs you choose to capture — we collect associated metadata such as timestamps, participants, direction, duration, and any notes you add, so the activity can be linked to the right lead or account.
• Location. If you enable it, we collect your device location to tag leads you capture at live events and to record check-ins, so you know where you met each prospect. Location is read only while you are actively capturing or checking in, and only with your permission.
• Camera and photos. With your permission, the app uses your camera to scan business cards and capture documents, and lets you attach photos from your library to leads, brands, and documents. We access the camera and photo library only when you initiate one of these actions.
• Microphone and voice. With your permission, the microphone is used for in-app calls and for the hands-free voice assistant, which transcribes your speech to text so you can dictate notes and commands. The microphone is active only during a call you place or answer or while you are using voice input.
• Calendar. If you enable calendar sync, we add and update meetings you choose on your device calendar so your CRM schedule and device calendar stay aligned. Calendar access is used only for the sync you initiate.
• Device identifiers for notifications.To deliver push notifications, we collect a device push token and related identifiers. On the mobile app these are provided by the operating system and by our push provider (see “How we share information”).
• Usage data. We collect information about how you interact with the Service, such as features used, pages viewed, actions taken, device and browser type, and diagnostic and performance logs.

2. How we use information

• To provide, operate, and maintain CRM functionality and your account.
• To link communications and imported contacts to leads, accounts, and pipelines so you can track relationships across your franchise network.
• To authenticate users and enforce access controls within your organization.
• To improve, troubleshoot, and secure the Service, and to develop new features.
• To communicate with you about the Service, including support and service notices.
• To comply with legal obligations and enforce our terms.

3. How we share information

We do not sell your personal information. We share information only as needed to operate the Service:

• Within your organization. Data you enter is visible to authorized users of your franchise organization according to the roles and permissions configured by your administrators.
• Our servers. Your data is stored on infrastructure we operate and control. We do not sell it or share it for advertising.
• Service providers and sub-processors. We use trusted third-party processors to deliver the Service. These providers process data on our behalf under contractual confidentiality and security obligations and only for the purposes we specify. Depending on the features your organization enables, they may include: Google Firebase Cloud Messaging (to deliver push notifications), and Freshsales (where your organization connects its CRM data for synchronization). We may add or change sub-processors as the Service evolves.
• Legal and safety. We may disclose information where required by law, regulation, legal process, or to protect the rights, property, or safety of LoQal, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, information may be transferred subject to this Policy.

4. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. When you delete your account or data, we delete or anonymize the associated personal information within a reasonable period, except where we are required or permitted to retain certain records for legal, financial, security, or compliance purposes. See our Account & Data Deletion page for details on what is deleted and what may be retained.

5. How to delete your account or data

You can delete your account and associated data at any time:

• In the app: go to Settings → Delete account.
• By request: visit our Account & Data Deletion page or email arun@loqal.ai from your account email.

6. Your rights and choices

• Access and correction. You can access and update your account and CRM records within the Service, or request a copy of the personal information we hold about you.
• Deletion. You can delete your account and associated data as described below.
• Permissions. You control device permissions (contacts, location, camera, photos, microphone, calendar, and notifications) from your device settings, and can revoke them at any time. Some features will not work without the relevant permission.
• Exercising your rights.To make a request, contact us at the email in the “Contact us” section. We may need to verify your identity, and some rights may depend on the organization that administers your account.

7. Security

We take reasonable technical and organizational measures to protect your information. Data is encrypted in transit using industry-standard TLS. Tenant data is isolated using row-level security (RLS) so that each organization can access only its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children’s privacy

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us personal information, please contact us so we can remove it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

10. Contact us

If you have questions or requests regarding this Policy or your data, contact us at arun@loqal.ai.

[Company legal name and registered address — to be completed]