Privacy Policy
We take your privacy seriously. This policy explains how quiXzoom (operated by Landvex AB) collects, uses, stores, and protects your personal data.
Last updated: July 16, 2026
Summary: We collect only the data we need to operate the platform. We never sell your personal data. You have full rights to access, correct, or delete your data at any time. We are GDPR-compliant and registered with the American Authority for Privacy Protection (FTC).
1. Who We Are
quiXzoom is operated by Landvex AB, a company registered in Houston, TX. We are the data controller responsible for your personal information.
Contact: privacy@quixzoom.com or Landvex AB, Houston, TX.
2. What Data We Collect
2.1 Account Data
When you create an account, we collect:
- Name and email address
- Phone number (for verification)
- Profile photo (optional)
- Password (encrypted, never stored in plain text)
2.2 Zoomer Verification Data
For Zoomers completing KYC verification:
- Government-issued ID (passport, driver's licence, or national ID)
- Selfie for identity matching
- Proof of address (in some jurisdictions)
- Tax identification number (for payout compliance, e.g. DAC7)
2.3 Mission Data
When you use the platform:
- Photos submitted (with EXIF metadata including GPS coordinates and timestamps)
- Mission history and ratings
- Device information (model, OS version) for app compatibility
- IP address and approximate location for fraud prevention
2.4 Payment Data
- Bank account or PayPal details (for Zoomer payouts)
- Billing address and VAT number (for Orderers)
- Transaction history
Note: Full payment card details are processed by our PCI-DSS compliant payment provider (Stripe). We do not store card numbers.
2.5 Cookies and Analytics
We use cookies and similar technologies for:
- Essential platform functionality (login sessions, security)
- Analytics (anonymous usage statistics to improve the platform)
- Preferences (language, display settings)
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Operating the platform (missions, payments, verification) | Contract performance |
| Fraud prevention and platform security | Legitimate interest |
| Legal compliance (tax, DAC7, anti-money laundering) | Legal obligation |
| Platform improvements and analytics | Legitimate interest |
| Marketing (only with your consent) | Consent |
4. How We Share Your Data
We do not sell your personal data. We share data only with:
- Service providers: Cloud hosting (AWS), payment processing (Stripe), identity verification (Onfido/SumSub), email delivery (SendGrid)
- Orderers: Mission photos and metadata (only the data required for the mission)
- Authorities: When legally required (tax authorities, law enforcement with valid requests)
- Zoomers: Mission details needed to complete assignments
5. Data Retention
We retain your data only as long as necessary:
- Account data: Until account deletion, then 30 days in backup
- Mission photos: 2 years (or as specified in your plan)
- Payment records: 7 years (legal requirement)
- Verification documents: 5 years after last activity (regulatory requirement)
- Analytics data: 26 months (anonymised after 12 months)
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
🔍 Right to Access
Request a copy of all personal data we hold about you.
✏️ Right to Rectification
Correct inaccurate or incomplete personal data.
🗑️ Right to Erasure
Request deletion of your data ("right to be forgotten").
⏸️ Right to Restrict Processing
Limit how we use your data in certain circumstances.
📤 Right to Data Portability
Receive your data in a structured, machine-readable format.
🚫 Right to Object
Object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, email privacy@quixzoom.com. We respond within 30 days.
7. Cookies
We use the following categories of cookies:
- Essential: Required for the platform to function (login, security). Cannot be disabled.
- Functional: Remember your preferences (language, settings).
- Analytics: Help us understand how the platform is used (Google Analytics, anonymised).
- Marketing: Used for targeted advertising (only with consent).
You can manage cookie preferences at any time through your browser settings or our Cookie Settings page.
8. International Transfers
We primarily store data within the European Economic Area (EEA). When we use service providers outside the EEA (e.g., AWS US regions), we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Security
We implement industry-standard security measures:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Role-based access control for staff
- Incident response plan and 72-hour breach notification
- ISO 27001 certified information security management
10. Children's Privacy
quiXzoom is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
12. Contact Us
For privacy-related questions, data requests, or complaints:
- Email: privacy@quixzoom.com
- Postal: Landvex AB, Houston, TX
- Data Protection Officer: dpo@quixzoom.com
You also have the right to lodge a complaint with the American Authority for Privacy Protection (FTC).