Privacy Policy — QuickRoomFinder

The data controller is Kioskware Sp. z o.o., registered in Warsaw, Poland, NIP: PL1133179599, REGON: 542748842, KRS: 0001195005. Contact: contact@kioskware.co

When using the QuickRoomFinder Service, we process the following categories of personal data: — Identity data: full name, email address, Webex organization ID. — Authentication data: OAuth tokens (Cisco Webex, Google, Microsoft 365). Passwords are never stored. — Organizational data: location names, floors, conference room names, kiosk configuration. — Video terminal data: device status, people count, temperature, humidity, air quality, sound level. — Technical data: IP address, browser headers, access logs. — Billing data: subscription and payment information.

We process personal data for the following purposes: — Service delivery: displaying room status, managing kiosks, authentication. — Account management: subscription management, payment processing. — Security: audit logging, unauthorized access monitoring. — Communication: notifications about changes to the Service, Terms, or Privacy Policy. — Legal compliance: fulfilling obligations under applicable law.

— Art. 6(1)(b) GDPR — performance of a contract (provision of the Service). — Art. 6(1)(f) GDPR — legitimate interests (security, analytics). — Art. 6(1)(c) GDPR — legal obligation (accounting, tax regulations).

Personal data may be shared with the following categories of recipients: — Cisco Systems, Inc. — as part of Webex API integration (room, device, and status data processed under the agreement with Cisco and made available for the operation of the QuickRoomFinder Service). — Paddle.com Market Ltd — payment processing as Merchant of Record. Paddle acts as an independent data controller for payment transaction data. — Google Cloud Platform — hosting and data storage (servers within the European Union and other locations as determined by cloud provider configurations). — Google LLC / Microsoft Corp. — if logging in via Google or Microsoft 365. We do not sell or share personal data with third parties for marketing purposes.

— Account and configuration data: for the duration of Service use. — Data after termination: 30 days, then permanently deleted. — Audit logs: 90 days. — Billing data: as required by tax law (5 years). — Session tokens: maximum 8 hours (Webex sessions) or 30 days (external sessions).

We implement the following security measures: — Encryption in transit: HTTPS/TLS for all communication. — Encryption of sensitive data: AES-256-GCM for Client Secret and Refresh Token. — Authentication: OAuth 2.0 (Cisco Webex, Google, Microsoft 365) — QuickRoomFinder does not store or process passwords. — Access control: user account permission level verified on every request. — Hosting: Google Cloud Platform in the EU region.

Under GDPR, you have the following rights: — Right of access to your personal data. — Right to rectification of inaccurate data. — Right to erasure ("right to be forgotten"). — Right to restriction of processing. — Right to data portability. — Right to object to processing based on legitimate interests. — Right to lodge a complaint with a supervisory authority. Users in the United Kingdom benefit from equivalent rights under UK GDPR. Users in the United States may exercise rights under applicable state data protection laws (e.g. CCPA in California). To exercise your rights, contact us at: contact@kioskware.co

The Service uses cookies for technical purposes only: — Session cookies: storing authentication tokens. — Preference cookies: interface language, color theme. We do not use advertising or tracking cookies. We do not use third-party analytics tools (e.g., Google Analytics).

Data may be transferred outside the European Economic Area as part of using Cisco Webex API and Google Cloud Platform services. Transfers are based on Standard Contractual Clauses (SCC) or European Commission adequacy decisions.

We notify Users of material changes to this Privacy Policy in a manner appropriate to the nature of the changes. The current version of the Policy is always available at qr.kioskware.co/privacy.

Because QuickRoomFinder presents data fetched from the external Cisco Webex Control Hub platform, Kioskware Sp. z o.o. cannot guarantee the accuracy, completeness, or timeliness of that data.