This Privacy Policy explains how Queshot Pty Ltd (ACN 699 051 744, ABN 12 699 051 744) ("Queshot", "we", "us") collects, holds, uses and discloses your personal information. We handle personal information in accordance with the *Privacy Act 1988* (Cth) and the Australian Privacy Principles (APPs), and we comply with the APPs whether or not the small-business exemption would otherwise apply to us. This policy covers both customers and café partners who use the Queshot app, café dashboard and website (the "Platform").
digits) provided by our payment processor, Stripe. We do not collect or store your full card number.
have an active order or have enabled Kerbside or auto-order, to time your order and trigger auto-order; and, if you save a home or other place, the coordinates and address of those saved places. We retain this location information — your saved home/place coordinates and the origin, route, travel time and timing of your orders — linked to your account, and use it as described in clause 4. Access to identifiable location data is restricted to authorised Queshot staff and is logged. We do not sell it. When you tell us you're on your way to collect an order ("I'm on my way"), we collect your precise location for the duration of that pickup trip only. This location is sent to Google Maps Platform solely to calculate your arrival estimate — we do not store a trail of where you have been**; only the resulting estimate and the time it was last refreshed are kept against your order. Sharing stops automatically when you arrive, when the order is collected or cancelled, if you tap Stop, or after a two-hour cap, whichever comes first. While an on-my-way trip is active, iOS shows the system location indicator and Android shows a persistent notification, so it is always visible to you that sharing is under way.
on your device before the image is sent to us.** We store the picture, not where or when it was taken.
collected through analytics and error-monitoring tools (see clause 5).
the information needed to set up payouts through Stripe.
dashboard, including a history of changes to venue settings (the setting changed, its previous and new values, when, and which signed-in account made the change — a venue staff account, or Queshot support acting on the venue's account) and staff-facing records such as rosters, timesheets and task completions.
We collect sensitive information (such as allergy or dietary notes) only where you choose to provide it so an order can be prepared safely; we treat it as health information and only use it for that purpose.
We collect personal information: directly from you (when you create an account, place an order, or contact us); automatically as you use the Platform (through analytics, error-monitoring and device data); and from third parties where relevant — for example, order-status information from cafés, payment confirmations from Stripe, and address suggestions from Google when you use address search.
We use your personal information for the primary purpose of providing the Platform and fulfilling your orders, and for related purposes you would reasonably expect, including:
obligations;
customers are located, to plan coverage and improve the service; access to identifiable location data is restricted to authorised Queshot staff and is logged;
for example helping venues decide when to start preparing your order so it is fresh when you arrive (using your order and journey history — origin, route, travel time and timing), predicting demand, and improving preparation timing and scheduling; clause 10 explains how this data is kept; and
We disclose your personal information to:
to protect your information consistently with the APPs:
active (see clause 5);
We do not sell your personal information, and we never will.
We use PostHog (product analytics, session replay and heatmaps) and Sentry (error and crash monitoring) to understand how the Platform is used, find and fix problems, and improve the experience for you and for cafés.
viewed and navigation paths, and, on our website, may show us heatmaps of where visitors tap or click.
actually behaves. Everything you type is masked in these recordings — we never capture passwords, card details, messages, search terms or any other text you enter.
version and similar technical data) and diagnostic/crash data through these tools, so we can reproduce and fix problems.
your IP address at the moment of the event. We discard the IP address itself immediately after that lookup — we do not retain your IP address in analytics data.
or, if you are not signed in, an anonymous device identifier — never directly to your name, email address or phone number, and we do not put personal identifiers into analytics events.
may use the Meta Pixel and Google Ads/Analytics (gtag) to measure whether our ads work — for example whether someone who clicked an ad went on to join our waitlist. These tools can set cookies or similar identifiers in your browser and share limited technical data (such as the page you visited and an advertising click identifier) with Meta Platforms and Google. We never send them your name, email address or phone number for this purpose. We use your browser's reported time zone to avoid enabling them for visitors who appear to be browsing from the EU/EEA, UK or Switzerland. See our How we use data notice for the specific cookies involved.
in Settings → Privacy or from the privacy control at the bottom of our website and dashboards. This choice roams with your account while you are signed in to the app or your venue/admin dashboard; on our public web pages it applies per browser. You can also email support@queshot.com, or use Meta's (facebook.com/adpreferences) and Google's (adssettings.google.com) own ad-preference controls directly. Turning analytics off stops new analytics events, session recordings and advertising-measurement events; it does not affect service communications or how the Platform works for you.
generally while your account is active. Session recordings are automatically deleted after a fixed period following capture, regardless of whether your account stays active.
See our How we use data notice for more, including which of our service providers process this information and where.
Some of our service providers store or process personal information overseas. The countries where your information is likely to be handled include the United States and member states of the European Union/EEA, and other countries where our sub-processors operate — including, where our advertising campaigns are active, Meta Platforms (which processes advertising-measurement data in Ireland and the United States) and Google LLC (United States). Before disclosing information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs (including through data-processing agreements). Under the *Privacy Act*, in many cases we remain accountable for how those overseas recipients handle your information.
We will only send you marketing communications where you have opted in. Every marketing message includes a simple way to unsubscribe, and we honour opt-outs promptly. You can also change your marketing preferences in settings. Service and transactional messages (order updates, security codes, receipts) are part of the service and are not marketing — you cannot opt out of them while you hold an active account or order. We do not use sensitive information for marketing.
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encryption in transit, access controls and row-level security on our database, vendor due diligence, and staff access on a need-to-know basis. No system is completely secure, but we work to protect your information and to respond quickly if something goes wrong.
If we ever experience a data breach that is likely to result in serious harm, we will assess it promptly and, where the Notifiable Data Breaches scheme requires, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable, including the steps you can take.
We keep your personal information while your account is active and for as long as needed for the purposes above or to meet our legal, tax and fraud-prevention obligations. When you delete your account, we delete or de-identify your personal information, retaining only the records the law requires us to keep (for example, transaction records for tax purposes). Analytics events and session recordings are retained as described in clause 5, and are deleted or de-identified in the same way when you delete your account.
De-identified data for forecasting models. When you delete your account, when a venue's agreement ends, or when we no longer need records that contain personal information, we delete or de-identify them in line with the Australian Privacy Principles. We may retain de-identified data — with names, contact details, account identifiers and other identifying details removed, so it no longer identifies you (or, for venue records, the venue) — and any de-identified data we retain this way is used solely to build and improve Queshot's own forecasting and optimisation models described in clause 4. We do not sell this de-identified forecasting data, and do not disclose it for third-party advertising. (Our separate, narrower use of advertising-measurement pixels — while our ad campaigns are active, and never using this de-identified forecasting dataset — is described in clause 5.)
You can access and correct most of your information directly in settings. You can also ask us for access to, or correction of, your personal information by emailing support@queshot.com. We will respond within a reasonable time (generally 30 days). Access is free to request; if we refuse access or correction, we will give you written reasons and tell you how to complain, and you may ask us to attach a statement noting your disagreement.
You can delete your account and personal information in the app (Settings → Account), or, without needing the app installed, self-service at queshot.com/delete-account — enter your account email, confirm the 6-digit code we send you, and your account is deleted immediately. You can also request deletion at any time by emailing support@queshot.com (for example, for a venue, admin, or suspended account, which the self-service page does not cover). When you delete your account we remove or de-identify your personal data, keeping only what the law requires and any de-identified data described in clause 10 (which no longer identifies you).
The Platform is intended for people aged 18 and over and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Some Platform features operate automatically — for example, auto-order places your saved order when you enter a café's area, and automated checks help us detect fraud and prevent misuse. Where we introduce automated decisions that could significantly affect your rights or interests, we will describe in this policy the kinds of information used and the kinds of decisions involved, consistent with our obligations under the *Privacy Act* (this obligation applies from 10 December 2026).
Our website uses essential cookies to function, may use analytics cookies to understand usage, and — only while our advertising campaigns are active — may use advertising cookies (set by the Meta Pixel and Google Ads/Analytics) to measure ad performance. You can control cookies through your browser, and can turn the advertising cookies off using the on-site privacy control described in clause 5. See our How we use data notice for details, including the specific cookies involved.
If you have a question, an access or correction request, or a privacy complaint, contact our Privacy Officer at support@queshot.com. We will acknowledge and respond to complaints within a reasonable time. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.
Venues (café, restaurant, food truck and other hospitality partners) can enter details about their own team in their venue dashboard, to help manage staffing.
employment type and pay rate.
what is entered and who it's about. We handle it with the same care as the other personal information we process, under the *Privacy Act 1988* (Cth) and the Australian Privacy Principles.
visible to the venue's managers.
one. Tax and payroll declarations are a matter for the venue's own payroll or accounting provider.
into the staff profile when the link is set up. If the account's email later changes, the copy held in the staff profile can become out of date.
timesheets, task completion (including any photo evidence or temperature entries submitted), worker documents and training records the venue keeps, and the venue's settings-change history — the Platform keeps records of those actions linked to the relevant staff profile or signed-in account. Venues use these records to run their business; we process them as a service provider to the venue and use them to operate, secure and improve the Platform as described in this policy. Some of these records must be kept for legally required periods (for example, time-and-wages records under Fair Work record-keeping rules, and food-safety task records); photo evidence attached to a completed task is automatically deleted after the venue's chosen retention period, while the completion record itself is kept.
it uses and what records they create, and for meeting any workplace-surveillance notice, consultation or policy requirements that apply where its staff work. If you are a staff member with a question about records held about you, start with your venue; you can also contact us at support@queshot.com.
erasing it. A venue can request permanent deletion of its staff records at any time by emailing support@queshot.com. When a staff member's linked Queshot account is deleted, the account itself is de-identified and the venue's settings-change history no longer identifies them as the person who made a change. The venue's own employment records — the staff profile, rosters, timesheets, task completions and documents — remain with the venue as the employer's records (some must be kept for legally required periods); staff can direct access or deletion requests about those records to their venue.
We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, for material changes, take reasonable steps to notify you. This policy is available free of charge, and we will provide a copy in another form on request.