Privacy Policy

[LAWYER / HUMAN REVIEW] Real controller name, address, and DPO / KVKK contact, if any.

Contact: privacy@qlix.me

• Account: name, email, password hash, username.
• Card & profile: title, company, bio, links, avatar/cover images.
• Contacts/CRM: contacts you add, notes, interactions (sensitive fields encrypted with AES-256).
• Usage: card view/click analytics, device/browser info, IP (truncated).
• Payments: subscription/store transactions via Stripe; we do not store card numbers.

• Providing the service — performance of a contract (art. 6(1)(b)).
• Security, abuse prevention — legitimate interest (art. 6(1)(f)).
• Analytics/marketing cookies — explicit consent (art. 6(1)(a)); see Cookies.
• Legal obligations — (art. 6(1)(c)).

Your data is hosted in the Frankfurt / EU region. Where transfer outside the EU is involved (e.g. certain sub-processors), we rely on Standard Contractual Clauses (SCCs) or adequacy decisions.

[LAWYER / HUMAN REVIEW] List the sub-processors used (Stripe, email, hosting, etc.) and their locations.

Your data is kept while your account is active; upon a deletion request or the end of a legal period it is anonymized/deleted.

You have the right to access, rectification, erasure (“right to be forgotten”), restriction of processing, portability (export), and objection. Data export and account deletion endpoints are available in the app. Requests: privacy@qlix.me.

We do NOT sell or share your personal information (no “sale”/“share” in the CCPA/CPRA sense). You may exercise your rights to know, delete, correct, and not be discriminated against by contacting us.

See our Cookie Policy for cookie usage and consent management.

[LAWYER / HUMAN REVIEW] The competent supervisory authority (e.g. the relevant German state DPA or the TR KVKK Authority) and your right to lodge a complaint.