Privacy Policy

Guest data — When visitors connect through a captive portal powered by VoqadoWiFi, we collect:

• Email address and name (required for login)
• Phone number and birthday (optional, if enabled by the venue)
• Device MAC address and type (iOS, Android, laptop)
• Connection timestamp, IP address, and SSID
• Marketing consent choices

Account data — When you create a VoqadoWiFi account, we collect your name, email, organisation name, and payment information (processed securely via Stripe).

Usage data — We collect analytics about how you use the dashboard (page views, feature interactions) to improve the product.

We use collected data to:

• Operate and improve the VoqadoWiFi platform
• Authenticate guests through captive portals and grant WiFi access
• Sync guest data to third-party marketing tools (e.g. Mailchimp) when you authorise the integration
• Send platform notifications and product updates
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal data. We share data only with:

• Service providers (Supabase for database hosting, Vercel for hosting, Stripe for payments)
• Mailchimp — only when you have explicitly connected your Mailchimp account and a guest has given marketing consent
• TP-Link Omada — MAC address and session tokens are passed to your configured Omada controller to grant WiFi access
• Law enforcement — when required by law or to protect rights and safety

VoqadoWiFi venues operate as data controllers for their guests. VoqadoWiFi acts as a data processor. Venues are responsible for:

• Presenting an appropriate privacy notice at the point of WiFi login
• Obtaining valid consent for marketing communications
• Responding to guest data subject requests (access, deletion, portability)
• Configuring appropriate data retention settings

Under GDPR and similar laws, guests have the right to access, rectify, or delete their data. Requests can be directed to the venue operator, or to us at privacy@voqadowifi.com.

Guest connection records are retained for 24 months by default, unless you configure a shorter retention period in your dashboard settings. Account data is retained for the lifetime of your account plus 90 days after deletion.

Our dashboard uses essential cookies for authentication. We use minimal analytics to understand product usage. Captive portals do not set persistent cookies on guest devices.

We use industry-standard security measures including TLS encryption in transit, encrypted database storage, and strict access controls. MAC addresses stored in our database are hashed after 90 days.

Your data may be processed in the European Union or United States. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws.

We may update this policy from time to time. Material changes will be communicated via email or dashboard notification. Continued use of VoqadoWiFi after changes constitutes acceptance of the updated policy.

For privacy-related questions, contact us at privacy@voqadowifi.com or by post at VoqadoWiFi Ltd, [Address].