QREPORT LLC PRIVACY POLICY

IMPORTANT NOTICE – CLICKWRAP ACCEPTANCE REQUIRED

By clicking “I AGREE” or by accessing or using the software, you acknowledge that you have read and understand this Privacy Policy.

1. Roles and Data Processing Status

Your employer or company acts as the data controller and determines the purposes and means of processing personal data.

QReport LLC, a Florida Limited Liability Company with its principal place of business at 235 SW 11th Place, Gainesville, FL 32601 (“Provider”), acts as a data processor and processes personal data solely on behalf of and under the instructions of the Customer, except where Provider uses aggregated and de-identified data as described in this Policy.

2. Information We Collect

We may collect the following categories of information:

• Name, email address, job title, employer name, role designation

• Login credentials and authentication tokens

• Uploaded documents, checklists, workflows

• Photographs, videos, audio files

• Metadata associated with uploaded content (timestamps, device identifiers)

• Activity logs and feature interaction data

• IP address, browser type, operating system

• Device identifiers, crash logs, diagnostic data

• Application performance and analytics data

• Time zone data

• Approximate or precise geolocation data (if enabled by the user or employer)

• Authentication and session cookies used for security and access control

We do not collect sensitive personal information such as biometric identifiers or government-issued identification numbers unless explicitly required and authorized.

3. Location and Device Permissions

Geolocation features are optional and controlled through device-level permission settings.

Raw geolocation data is not stored by default unless required for specific functionality enabled by the Customer.

Location data is not used for advertising or third-party behavioral tracking. Users may disable location permissions at any time through device settings.

4. AI, Analytics, and De-Identified Data

Certain features utilize artificial intelligence and machine learning technologies, including third-party AI providers.

Provider may collect, aggregate, anonymize, and de-identify data derived from Customer Data for analytics, benchmarking, service improvement, product development, security monitoring, and training internal or future third-party machine learning models.

All such data is processed so that it does not identify, and cannot reasonably be used to identify, any company, employee, job site, or individual user. Provider implements commercially reasonable safeguards designed to prevent re-identification.

Provider does not sell personal data.

5. Data Retention, Suspension, and Deletion

Personal data is retained while accounts remain active.

Upon account termination, suspension, or permanent shutdown of the Services, Provider may delete or anonymize personal data following a commercially reasonable retention period unless retention is required by law.

Provider is not obligated to preserve, restore, or provide access to personal data following permanent deletion or shutdown.

6. Security

Provider implements commercially reasonable administrative, technical, and organizational safeguards designed to protect personal data.

No system can guarantee absolute security, and use of the Services is at your own risk.

7. User Content Responsibility

Users and Customers are responsible for ensuring they have all necessary rights and permissions to upload content, including photographs, videos, documents, and checklists.

Users represent that uploaded content does not infringe intellectual property, privacy, or publicity rights of any third party.

8. Mobile Application Privacy Disclosures

If you access the Services through a mobile application distributed via the Apple App Store or Google Play Store (“App”), the following applies:

• The App may collect device identifiers, crash reports, diagnostic data, usage data, and push notification tokens.

• The App does not track users across third-party apps or websites for advertising without required consent.

• The App may request permissions for camera, photo library, microphone, or location solely to provide requested functionality.

• The Services are not directed to children under 16 and we do not knowingly collect data from children under 16.

9. International Data Transfers

Personal data may be processed in the United States or other jurisdictions where Provider or its subprocessors operate. Appropriate safeguards are implemented where required.

10. User Rights

Requests regarding personal data access, correction, or deletion should be directed to your employer, who acts as the data controller.

11. Policy Updates

Material changes to this Privacy Policy require re-acceptance through clickwrap mechanisms. Acceptance timestamps and device metadata may be logged.

12. Contact Information

QReport LLC

235 SW 11th Place

Gainesville, FL 32601

Email: privacy@qreport.com

13. Governing Law

This Privacy Policy is governed by the laws of the State of Florida.