Effective Date: July 18, 2025
This policy ("Privacy Policy") describes how QommVita, Inc. ("QommAdd," "we," "us," or "our"), a community engagement and management SaaS application, collects, uses, processes, and discloses your personal information when you access or use our web and mobile applications (collectively, the "Services"). We are committed to protecting your privacy and handling your personal information with transparency and in accordance with applicable global data protection laws.
QommAdd is designed to empower local groups, organizations, and venues to better connect, organize, and engage with their communities. Our Services facilitate real-time communication, event and activity coordination, and network-building across various user types.
We collect various categories of personal information to provide, maintain, and improve our Services.
When you register for or use our Services, you may provide us with the following personal information:
When you access or use our Services, we automatically collect certain information about your device and usage patterns.
We may receive information about you from third-party services that integrate with QommAdd or from other sources.
As a community platform, QommAdd relies on user-generated content. This includes all digital assets you create and share, such as text messages, uploaded files (images, videos, documents), event details, and comments. The nature of a community platform means that this content is often shared among multiple users or made publicly available within specific community contexts.
We use the personal information we collect for various purposes, based on different lawful bases as required by applicable laws, including contractual necessity, legitimate interests, legal obligations, and your consent.
To create and manage your account, deliver core functionalities of QommAdd (e.g., real-time communication, event coordination), personalize your experience, and facilitate purchases (if applicable in the future). This processing is necessary for the performance of our contract with you.
To understand user behavior and preferences, analyze usage trends, identify insights, and develop new features and products. This is based on our legitimate interest in continuously improving our Services.
To investigate and prevent security issues, combat abuse and spam, detect and address suspicious activity, and ensure the overall security and integrity of our platform and user data. This is based on our legitimate interest in maintaining a secure service and complying with legal obligations.
To respond to your inquiries, provide technical assistance, and address any issues you may encounter. This is necessary for the performance of our contract with you and based on our legitimate interest in providing effective customer service.
To send you service updates, new feature announcements, and other relevant communications. We will obtain your consent where legally required for marketing communications.
To process and retain certain information as required by applicable laws, for potential legal claims, regulatory compliance, and in response to lawful governmental requests.
In rare circumstances, we may collect or share information if we believe it is necessary to prevent serious harm to a person.
We may share and disclose your personal information in the following circumstances:
We engage various third-party service providers to perform functions on our behalf and to help us operate, provide, and improve the Services. These include:
We enter into legally binding Data Processing Agreements (DPAs) or Data Processing Addendums with all third-party service providers that process personal data on our behalf. These agreements ensure that our processors implement sufficient data protection measures, process data only on our instructions, and comply with applicable data protection laws.
We may disclose your information if we believe it is necessary to:
We may disclose information in an emergency if we believe it is necessary to prevent death or serious bodily harm to any person.
In the event that QommAdd is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to this Privacy Policy.
We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you. This information may be used for various purposes, including research, analytics, and improving our Services.
QommAdd operates globally, meaning your personal information may be transferred to, stored, and processed in countries outside of your country of residence, including the United States where QommAdd is based. These countries may have data protection laws that are different from those in your country.
When transferring personal data outside the European Economic Area (EEA), we ensure an adequate level of protection by implementing appropriate safeguards, such as:
We utilize the European Commission's approved Standard Contractual Clauses, which are a common mechanism for ensuring adequate data protection during international transfers.
Transfers may occur to countries or specific sectors within countries that the European Commission has deemed to ensure an adequate level of data protection.
We continuously monitor developments in data protection laws to ensure our international data transfer mechanisms remain compliant.
Depending on your jurisdiction, you may have certain rights regarding your personal information. QommAdd is committed to enabling you to exercise these rights.
You have the right to request a copy of the personal information we hold about you and information about how we use and share it.
You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
You have the right to request the deletion of your personal information under certain circumstances. Please note that due to the nature of a community platform, some content you have shared may remain visible if it has been re-shared by others or is integral to public conversations, though your identifying profile information may be removed.
If you are a California resident, you have the right to opt-out of the sale or sharing of your personal information, including via a user-enabled Global Privacy Control (GPC).
If you are a California resident, you have the right to limit the use and disclosure of your sensitive personal information to specific purposes.
You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
You have the right to object to the processing of your personal information under certain conditions, particularly where processing is based on legitimate interests or for direct marketing.
Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the contact information provided in Section 12 of this Privacy Policy. We will respond to your request within the timeframes required by applicable law (e.g., within 45 calendar days for CCPA requests, with a possible extension to 90 days if we inform you). We may need to verify your identity before processing your request.
We implement robust technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction. These measures include:
We use comprehensive encryption protocols for data both in transit (e.g., SSL/TLS) and at rest.
Strict access controls are implemented, limiting internal access to personal data based on roles and necessity.
We conduct periodic security audits, including penetration testing, to identify and address vulnerabilities.
We maintain a well-defined incident response plan to promptly detect, report, and mitigate data breaches.
Our employees are regularly trained on data protection requirements and the importance of maintaining the security and confidentiality of personal information.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law.
Retained as long as your account is active. Upon account termination, we will delete or anonymize your personal information within 30 days, subject to legal or regulatory requirements.
Typically retained for 12-24 months for service improvement and analytics.
Retained as per regulatory requirements.
Retention policies for user-generated content may vary based on the nature of the content and community settings. We will provide clear instructions for users to request data deletion.
QommAdd is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us.
We may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or service offerings. We will notify you of any material changes by posting the updated policy on our website or through in-app notifications, and we will update the "Effective Date" at the top of this policy. We encourage you to review this Privacy Policy regularly.
If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your rights, please contact our privacy team at:
Email: tech@qommadd.com
Last updated: July 18, 2025
For questions about this Privacy Policy, contact us at tech@qommadd.com