Where is your data stored?

Qiscus uses third party vendors and hosting partners - for example, Amazon Web Services (AWS) - to provide the necessary software, storage, and related technology required to run Qiscus. We choose only reputable vendors which have strict and world-class security standards.

For on-premise Services, you may choose your own server/hosting providers as well. In this regard, Qiscus do not hold responsibility over the data stored in those server/hosting providers.

Qiscus owns all intellectual property rights relating to Qiscus software application and the Services. You retain all rights to your data that you provide to us pursuant to your use of Qiscus.

Your data may be stored in servers located in the United States or in any other country, depending on decisions made by Qiscus, our storage providers or you.

What information we collect

1) PERSONAL DATA

You have full authority over the personal data that you share with us. “Personal Data” refers to any data (whether true or not) about an individual who can be identified (i) from that data; or (ii) from that data and other information to which we have or are likely to have access, including data in our records.

For example, when you subscribe to our TechTalks or try out our trial services, we may ask you to provide your name, organization name, address and other contact details such as emails and handphone number. We may also require your credit or debit card information when you choose to use any of our Services (“Billing Information”).

2) SERVICE DATA

In connection with the use of our Services, we may collect data that is created or provided by you for such purposes (collectively, “Service data”). This may include, but not limited to: (a) the Personal Data you shared about other people and (b) usage data, such as dates, number of messages sent, number of active users, messaging history and other messaging metadata.

We also collect data related to your use of our website. We may use cookies and similar technologies on our website to gather information such as the date and time of visits, geographic location, the pages viewed, IP address, links to/ from any page, browser type and version, operating system, referral source, and time spent on our website.

How we use your data

We use the data collected to:

• Provide technical assistance to you or complete the tasks you request. For example, when you request for help from our Solution Architects, we will use your Personal and Service Data to provide assistance that is tailored to your needs;
• Provide monitoring, maintenance and improve our services;
• Manage payments. In Qiscus, we use third-party payment gateways or thirdparty credit card processing provider which may not be permitted to store, retain or use Billing Information except for the sole purpose of credit card processing and is subject to confidentiality obligations restricting the disclosure of information collected to other third parties;
• Follow-up or communicate with you about your interest in using Qiscus when you contact us to request for more information, sign-up for our TechTalk or send in your enquiries and so on;
• Share with you useful contents which may be of interest to you and update your of our latest Services;
• Manage and administer your account with Qiscus;
• Provide and administer our community of TechTalk subscribers/followers. Qiscus may provide blogs, community chat groups or even forums on our Website or Apps (collectively, “Community Platforms”). Any Personal Data you choose to submit in such Community Platforms may be read, collected, or used by others who visit these platforms, and may be used to send you unsolicited messages. Qiscus is not responsible for the Personal Data you choose to submit to these Community Platforms;
• Link your Qiscus account to third-party accounts such as Bagachat (for WhatsApp integration), Google, Github or Facebook;
• Produce training data derived from the Service Data for research, development and business analysis purposes;
• For other purposes that we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our Affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our Affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

NOTE
Qiscus’ use of the Service Data is also governed by the Service Agreement you enter into with Qiscus in connection with the services you subscribed to or engaged Qiscus for. In the event of any conflict between this Privacy Policy and the Service Agreements, the Service Agreements will control.

Cookies

We send cookies, which are a small amount of data, often including an anonymous unique identifier, to your browser to be able to identify who you are, and personalize our Services for you. Cookies may be required to use qiscus Web SDK and possibly other Qiscus Services. Most internet browsers provide you the option of turning off the processing of cookies, but this may result in the loss of functionality, restrict your use of the Website/Services and/ or delay or affect the way in which it operates.

How we secure your data

We are committed to safeguarding your Personal Data from unauthorised access. We employ appropriate organizational, technical, and administrative measures to protect Personal Data within Qiscus, including security controls to prevent unauthorized access to our systems.

Your account is protected by a password for your privacy and security. We strongly encourage you to prevent unauthorised access by taking precautionary measures such as limiting access to your computer and browser by signing off after you have finished accessing your account.

While we take reasonable steps to maintain the security of your personal information, you should understand there is always a level of risk assumed by sharing personal data online. If you have reason to believe that your interactions with our Services are no longer secure, please immediately email us at contact.us@qiscus.com.

Will we share the data we received?

We use the data collected to:

• We have partners who are helping us provide our Services on our behalf. We may share the Data we received to these partners solely as necessary for them to help us provide our Services;
• We use third-party hosting/service providers to help store the messages or data exchanged through our Services;
• We use other third-party services/tools such as analytics tool provider to understand how users interact with our Website and third-party credit card processing providers or payment gateways;
• As required by law, it may also be necessary to share information in order to investigate, prevent, or take action regarding suspected or actual illegal activities, including without limitation, fraud, situations involving potential threats to the physical safety of any person, or as otherwise permitted or required by law;
• Under special circumstances we may disclose personally identifiable information to our professional advisers such as auditors and lawyers, or to comply with any laws, rules, guidelines and regulations imposed by any governmental authority;
• To any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale) involving us, under a relevant confidentiality agreement.

NOTE
Other than the above scenarios, we do not share, rent, sell or disclose your Personal and Service Data to anyone.

What options do you have?

We do not require you to provide Personal Data when browsing the site, although some pages and content may include options for submitting your Personal Data in order for you to fully access and use such website features or functionalities.

You can opt out of receiving marketing messages from Qiscus by unsubscribing through the unsubscribe or opt-out link in an email. We will comply with your request as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages.

Accessing, correcting and deleting your information

You may access, correct or delete your Personal Data you have provided to us by using the tools within the Services (for example, editing your profile information on the service ) or by contacting support at contact.us@qiscus.com. Changes you make to your information on the Service take immediate effect on your network, but data will be retained in secure storage for a limited period afterward as part of our standard data backup process.

Children

We are unable to distinguish the age of users who access and use the Website. If a minor (according to applicable laws) has provided us with Customer Data or Personal Data without parental or guardian consent, the parent or guardian should contact us to remove the relevant Customer Data or Personal Data and unsubscribe the minor.

If we learn that a user is under the age of thirteen (13), he/she may not register an account with us or use our Services. If we learn that a user is under the age of thirteen (13), we will take appropriate steps to remove the user’s information from the database and restrict the user from future access to our Services.

Changes to this privacy policy

We will from time to time update this Policy to reflect customer feedback, changes in our Services, and to be consistent with applicable data privacy laws and regulations. When we post changes to this Privacy Policy, we will revise the “last updated” date at the top of the document. If there are material changes to this Policy, we will notify you.

However, we do strongly encourage you to check the date of this policy whenever you access our Services and review this Privacy Policy on a regular basis to keep yourself updated of any changes.