Privacy Policy | Qexion Labs

Introduction

Qexion Labs ("we," "us," or "our") is a Technology Innovation Company based in Accra, Ghana. We are committed to protecting your privacy and personal data in accordance with applicable data protection laws, including Ghana's Data Protection Act, 2012 (Act 843), the General Data Protection Regulation (GDPR) for EU/UK residents, and the California Consumer Privacy Act (CCPA/CPRA) for California residents. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, including our website, Q Hub customer portal, and QWS (Qexion Web Services) digital solutions. By using our services, you consent to the data practices described in this policy.

Information We Collect

We collect information to provide and improve our services. The types of information we collect include:

Personal Information (User-Provided)

• Full name and contact information (email address, phone number) • Business name and address • Project requirements and specifications • Payment information (processed via secure third-party processors) • Communication records and support messages • Profile information and preferences Legal Basis: Consent and/or contractual necessity

Automatically Collected Information

• IP address and device identifiers • Browser type and version • Operating system • Pages visited and time spent • Referring website addresses • Click patterns and navigation paths Legal Basis: Legitimate interest in improving our services

Cookies and Tracking Technologies

We use cookies and similar technologies to: • Maintain your login session and preferences • Analyze website traffic and usage patterns • Improve user experience and website performance • Remember your theme and language preferences Legal Basis: Consent (for non-essential cookies) You can control cookie preferences through your browser settings. However, disabling cookies may affect website functionality.

How We Use Your Information

We use the information we collect for the following purposes: • Service Delivery: To provide our development services, project management, and customer support through Q Hub • Communication: To send project updates, milestone notifications, and respond to inquiries • Authentication: To manage your account and secure access to our platform • Transaction Processing: To handle payments and billing for our services • Improvement: To analyze usage patterns and enhance our services • Security: To detect and prevent technical issues, fraud, and security threats • Legal Compliance: To comply with applicable laws and regulations

Information Sharing

We do NOT sell, trade, or rent your personal information to third parties. We may share your data only in these limited circumstances:

Service Providers

We work with trusted third-party services (such as Supabase for database hosting, Resend for email delivery, and payment processors) that help us operate our platform. These providers are contractually bound to protect your data and use it only for the services they provide to us.

Legal Requirements

We may disclose your information when required by law, court order, or government authorities, or when necessary to protect our rights, safety, or property.

Business Transfers

In connection with mergers, acquisitions, or asset sales, your information may be transferred. We will provide notice before your personal information becomes subject to a different privacy policy.

With Your Consent

We may share your information when you explicitly consent to sharing for specific purposes.

Data Retention

In accordance with Ghana's Data Protection Act (Act 843), we retain your data for the following periods: | Data Type | Retention Period | |-----------|------------------| | Project records & contracts | 7 years after project completion | | Financial/payment records | 10 years (Ghana Revenue Authority requirement) | | Communication records | 3 years | | Marketing preferences | Until consent is withdrawn | | Account data | While account is active; deleted upon account closure | | Technical logs | 1 year for security and performance monitoring | When data is no longer needed, we securely delete or anonymize it.

Your Privacy Rights

Depending on your location, you have specific rights regarding your personal data:

Ghana (Data Protection Act 843)

• Access your personal data • Request correction of inaccurate data • Request deletion (subject to legal retention requirements) • Object to processing • Withdraw consent at any time • Lodge a complaint with the Data Protection Commission (DPC)

EU/UK (GDPR)

• Data portability (receive your data in machine-readable format) • Restrict processing • Object to processing • Withdraw consent • Lodge a complaint with your supervisory authority

California (CCPA/CPRA)

• Know what information is collected • Know if information is sold or disclosed • Opt-out of sale of personal information • Access your personal information • Request deletion • Non-discrimination for exercising your rights

Data Security

We implement industry-standard security measures to protect your information: • Encryption in transit (TLS/SSL) and at rest • Secure access controls and authentication • Row-Level Security (RLS) policies in our database • Regular security assessments and updates • Employee data protection training While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

International Data Transfers

Your data may be processed by our service providers located outside Ghana. We ensure adequate protection through: • Standard Contractual Clauses with service providers • Adequacy decisions by relevant data protection authorities • Appropriate safeguards as required by GDPR and other applicable laws We maintain the same level of protection regardless of where your data is processed.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us immediately.

Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes: • We will update the "Last Updated" date at the top of this policy • We may notify you by email or through our platform for significant changes • Your continued use of our services after updates constitutes acceptance of the revised policy We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: Qexion Labs Location: Accra, Ghana Email: support@qexionlabs.com Website: qexionlabs.com For data protection inquiries, you may also contact Ghana's Data Protection Commission at www.dataprotection.org.gh.