Privacy Policy

1Who We Are

SQR Connect is the controller of personal data processed through the SQR Connect platform, including the mobile app and customer portal. For any privacy-related enquiry, please contact us at Help@sqrai.app.

Businesses that use SQR Connect to manage their own customers and projects also act as independent controllers for the personal data of their own clients. SQR Connect processes that data on behalf of those businesses as a data processor.

2Information We Collect

We collect the following categories of information through the platform:

3How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the SQR Connect platform and its features
• Authenticate and manage access for staff and customer portal users
• Enable businesses to manage projects, field crews, and customer communications
• Send notifications and emails related to account activity and job updates
• Generate warranty certificates and other project documentation
• Maintain audit logs for security and accountability purposes
• Diagnose technical issues and monitor platform performance
• Meet legal and regulatory obligations

4Legal Basis for Processing (UK GDPR)

We rely on the following legal bases to process personal data:

• Contract: Processing necessary to provide the SQR Connect service to businesses and their users.
• Legitimate interests: Platform security, fraud prevention, audit logging, and service improvement, where these are not overridden by your rights.
• Legal obligation: Where we are required to retain or disclose data by law.
• Consent: For optional features such as location-based check-ins, where explicit in-app consent is obtained.

5Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

• Service providers: Third-party services we use to operate the platform (see Section 6).
• Business clients: Staff and customer data is accessible to the business that operates the relevant SQR Connect account.
• Legal requirements: Where required by law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction, subject to appropriate protections.

6Third-Party Services

SQR Connect uses the following third-party services to operate the platform:

7Data Storage and Security

We take the security of your data seriously and apply the following measures:

• Encryption in transit: All data transmitted between clients and our servers is encrypted using TLS.
• Encryption at rest: Database and file storage are encrypted at rest by our infrastructure providers.
• Authentication: Staff access requires email and password authentication. Passwords are hashed using bcrypt and never stored in plain text. Customer portal access uses one-time email verification codes.
• Role-based access controls: Access to data is restricted by role. Staff members can only access data relevant to their company and assigned responsibilities.
• Secure cloud infrastructure: We use managed cloud infrastructure with monitoring, automated backups, and access controls.
• One-time tokens: Account setup links and password reset links are single-use, time-limited, and stored only as hashed values.

While we take all reasonable precautions, no method of data transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately at Help@sqrai.app.

8International Transfers

Our primary infrastructure is hosted within the United Kingdom and European Economic Area. Some third-party service providers (including Cloudflare and Expo) operate internationally. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including reliance on adequacy decisions or standard contractual clauses as applicable.

9Data Retention

We retain personal data for as long as necessary to provide the platform services and to meet our legal obligations. Specifically:

• Active accounts: Retained for the duration of the business's subscription.
• Project and job data: Retained for the life of the business account and for a reasonable period thereafter to support warranty and dispute resolution.
• Audit logs: Retained for up to 12 months for security and accountability purposes.
• Deleted accounts: Personal data is removed or anonymised within a reasonable period following account deletion, except where retention is required by law.

To request early deletion of your data, contact us at Help@sqrai.app.

10Your Rights

Under UK GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at Help@sqrai.app.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

11Children's Privacy

SQR Connect is a professional business tool intended for use by adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us at Help@sqrai.app and we will take steps to remove it promptly.

12Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. For significant changes, we will notify users through the platform or by email where required. Your continued use of SQR Connect following any update constitutes acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we protect your data.