Privacy Policy

This Policy applies to chasequeue.com, the ChaseQueue application, support interactions and related services we operate. It does not govern the independent privacy practices of a business that uses ChaseQueue to contact its own customers.

For account, billing, website, security and support information, ChaseQueue generally decides why and how the information is used and acts as the controller, business or equivalent responsible organization where those concepts apply.

For personal information that a ChaseQueue customer uploads about its own customers or recipients, that business generally decides the purpose of processing. In that context, ChaseQueue generally acts as a processor, service provider or equivalent provider on the business's instructions. Section 5 of our Terms of Service contains additional data-processing terms for that relationship.

If you received a quote, proposal or invoice follow-up sent through ChaseQueue, the business that contacted you is generally responsible for deciding why it holds and uses your information. Questions about the underlying quote, invoice, consent to contact, payment, dispute or relationship should normally be directed to that business first.

We can assist our business customers with appropriate privacy requests relating to data we process for them. You may also contact us if you cannot identify or reach the business that contacted you.

Depending on how ChaseQueue is used, we may collect the following categories:

• Account and identity information: name, email address, login and verification data.
• Organization information: business or workspace name, settings, timezone, currency, sender name and reply destination.
• Customer and chase data: recipient names, email addresses, phone numbers if provided, quote or invoice type, amount, reference, sent date, due date, notes, templates, follow-up schedule, status and history.
• Message and reply information: outbound message content, delivery events, provider identifiers, detected replies, forwarding metadata and attachments associated with a reply when applicable.
• Billing information: subscription state, billing currency, plan, Stripe customer/subscription identifiers, billing country and transaction metadata. Payment-card details are handled by Stripe and are not stored in ChaseQueue's application database.
• Technical and security information: IP address, browser/device signals, request logs, timestamps, authentication events, approximate country/region/city signals provided by infrastructure, error information and fraud/abuse indicators.
• Analytics information: only if you allow optional analytics, website visits, referral information and limited product-funnel events such as workspace creation, first chase creation and subscription start.
• Support and communications: messages, feedback, troubleshooting details and other information you voluntarily send us.

We collect information directly from account holders, from the data they enter about their own customers, from recipients who reply to ChaseQueue-delivered messages, from payment and email providers, and automatically from devices and infrastructure when the Service is used.

We may also receive limited location signals such as country, region, city or timezone from infrastructure providers to select billing currency, suggest timezone settings, secure the Service or reduce fraud. We do not need precise GPS location for ChaseQueue.

We use personal information for purposes including:

• creating and securing accounts and workspaces;
• scheduling, sending, receiving and tracking requested quote and invoice follow-ups;
• detecting replies, failures and status changes so automation can stop or request attention;
• providing billing, subscription and customer support;
• maintaining backups, logs, reliability, abuse prevention and fraud controls;
• debugging, auditing and improving the performance and usability of ChaseQueue;
• communicating service, security, billing and legal notices;
• complying with law, protecting rights and resolving disputes;
• measuring website and signup performance when optional analytics consent has been given.

Where law requires a legal basis for processing, the basis depends on the context. We may process information because it is necessary to perform a contract with you, to take steps at your request before entering a contract, to comply with legal obligations, based on our legitimate interests in operating, securing and improving a business service, or based on consent where consent is the appropriate basis.

When a ChaseQueue customer provides personal information about its own recipients, that customer is responsible for identifying the lawful basis for its collection and use. We process that information on the customer's instructions to provide the Service.

ChaseQueue uses essential browser storage, cookies or similar technologies where needed for authentication, session continuity, security and core functionality. These are not used for behavioural advertising.

With your permission, ChaseQueue uses Google Analytics to understand aggregate website visits, referral channels and selected product-funnel milestones. Google Analytics is optional and is not loaded until you choose Allow analytics.

We do not send customer names, customer email addresses, quote or invoice details, references, notes, private chase URLs or message content to Google Analytics, and advertising personalization signals are disabled.

You can withdraw or change that choice at any time: Change analytics choice.

Stripe processes payments and billing details for paid ChaseQueue subscriptions. ChaseQueue receives limited billing and transaction information needed to manage subscriptions, entitlements, cancellations, fraud controls and account support.

Stripe's handling of information is also governed by Stripe's own privacy terms. We do not intentionally store full payment-card numbers or card security codes in the ChaseQueue application database.

We disclose information only as reasonably needed to operate the Service, comply with law, complete a transaction, protect the Service, or as otherwise described here. Key categories and providers currently include:

• Application hosting and network infrastructure: Vercel, Cloudflare and ChaseQueue-controlled production infrastructure.
• Database and authentication technology: Supabase technology, including self-hosted production components where applicable.
• Email delivery and inbound reply handling: Resend.
• Payments and subscription management: Stripe.
• Optional analytics: Google Analytics, only after analytics permission is given.

Providers may change as the Service evolves. We require providers to handle information for legitimate service purposes and subject to applicable contractual, confidentiality and security obligations.

ChaseQueue does not sell personal information for money. We also do not use Customer Data for cross-context behavioural advertising or disclose it to third parties for their own unrelated advertising purposes.

If our practices materially change in a way that creates an opt-out right under applicable law, we will update this Policy and provide the legally required choice before relying on the changed practice.

ChaseQueue does not currently use customer names, customer email addresses, quote or invoice content, private notes or message content to train public or general-purpose generative AI models. If a future feature introduces AI processing that materially changes how personal information is used, we will update our disclosures and obtain any consent or contractual authorization required by law.

We may preserve, access or disclose information when we reasonably believe it is necessary to comply with law, legal process or a valid government request; enforce our agreements; detect or prevent fraud, abuse or security incidents; protect rights, safety or property; or defend legal claims.

If ChaseQueue or substantially all related business assets are involved in a merger, acquisition, financing, reorganization or sale, information may be disclosed as part of that transaction subject to appropriate confidentiality protections and applicable law.

ChaseQueue is operated from Canada and serves users internationally. Our providers and their systems may process information in Canada, the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live.

Where cross-border transfer rules apply, transfers may rely on recognized mechanisms such as adequacy decisions, contractual protections, processor terms or other lawful mechanisms available for the provider and jurisdiction involved.

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining business and billing records, security, backups, fraud prevention, dispute resolution and legal compliance.

Retention periods vary by data type and context. Deleting a record from the active Service may not immediately remove every backup or log copy. Backup copies may remain for a limited period until normal rotation, unless longer retention is required for security, legal or dispute purposes.

We use technical and organizational safeguards designed to protect information, including access controls, authentication, encrypted network connections, restricted production access, backup controls and monitoring appropriate to the Service.

No internet-connected service can promise absolute security. You are responsible for keeping your credentials secure, using trusted devices and promptly reporting suspected unauthorized access to us.

If we become aware of a security incident involving personal information, we will investigate, take reasonable containment and remediation steps, and provide notices to affected customers, individuals or regulators when required by applicable law.

Depending on where you live and the law that applies, you may have rights to request access to personal information, correction, deletion, restriction, portability, information about processing, objection to certain processing, withdrawal of consent, or review of certain automated decisions. You may also have the right to complain to a privacy or data-protection regulator.

Rights are not absolute and may be subject to exceptions, verification and lawful retention requirements. We will not discriminate against you for exercising a privacy right protected by applicable law.

Canada. Depending on the circumstances, federal or provincial private-sector privacy law may apply. Individuals may have rights to access and correct personal information, challenge compliance and complain to the appropriate privacy commissioner.

European Economic Area, United Kingdom and Switzerland. Where applicable, individuals may have rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent, and may complain to a competent supervisory authority. Where we rely on legitimate interests, you may object where the law provides that right.

United States. Residents of certain states may have rights to know/access, correct, delete or obtain a portable copy of personal information, and to opt out of certain sales, sharing, targeted advertising or profiling where those activities occur. ChaseQueue does not currently sell personal information or share Customer Data for cross-context behavioural advertising.

Other jurisdictions. Laws in Brazil, Australia, New Zealand, India and other countries may provide additional or similar rights. We will honor applicable mandatory rights based on the jurisdiction and circumstances of the request.

Send privacy requests to hello@chasequeue.com. Please describe the request and the account or email address involved. We may need to verify identity or authority before completing a request.

If the information was provided to us by a ChaseQueue business customer about one of its recipients, we may refer the request to that business or coordinate with it because that business generally controls the underlying customer relationship.

If you believe we mishandled personal information, contact us first so we can investigate. This does not prevent you from contacting the privacy or data-protection regulator available to you under applicable law.

ChaseQueue is a business service and is not directed to children. Account holders must be at least 18. Customers should not use ChaseQueue to intentionally store or process personal information about children unless the use is lawful, necessary for their business, and expressly supported by the Service and applicable agreements.

Please do not place unnecessary sensitive information into ChaseQueue. The Service is not intended to store full payment-card numbers, passwords, banking credentials, government ID numbers, medical records, biometric identifiers or similarly high-risk data unless ChaseQueue expressly supports that category and appropriate safeguards and agreements are in place.

ChaseQueue may link to external websites or provider portals. Their privacy practices are controlled by those third parties, not this Policy. Review their privacy information before providing information directly to them.

Because ChaseQueue does not currently sell personal information or use Customer Data for cross-context behavioural advertising, we do not currently operate a separate sale/share-opt-out flow. Optional analytics remains controlled by the analytics choice shown on ChaseQueue. If applicable law requires us to respond differently to a recognized browser privacy signal in the future, we will update our implementation and this Policy.

We may update this Policy as ChaseQueue, our providers or applicable law changes. The current version and effective date will be posted here. If a change materially affects how we use personal information, we will provide additional notice or obtain consent where required by law.

Privacy questions, requests or complaints can be sent to hello@chasequeue.com. Please do not include passwords, full card numbers or other unnecessary sensitive information in your message.

Your use of ChaseQueue is also governed by our Terms of Service.