Privacy Notice

Data Controller

CBQA Solutions Inc. (“CBQA”, “we”), owner of the Scanley product, with address at 4847 Hopyard Road Suite 4-151, Pleasanton, CA 94588, United States.

Contact: marketing@cbqasolutions.com | +1 (925) 951-8681

Roles

• Scanley website (Scanley.io): CBQA is the data controller.
• Scanley application: when a client company uses the platform, that client is the data controller, and CBQA acts as a data processor, handling data on behalf of and under the client’s instructions.

This notice complies with CalOPPA, the California Consumer Privacy Act (CCPA/CPRA), the Mexican Federal Law on Protection of Personal Data Held by Private Parties, and Colombian Law 1581 of 2012.

Scope

This Privacy Notice applies to:

• Visitors of the Scanley.io website.
• Users of the Scanley application (web, mobile, or warehouse devices).

Personal Data We Collect

A) Website visitors and demo requests

We may collect:

• Name, surname, company, email address, phone number, location, and message.
• Technical data: IP address, browser type and version, operating system, pages visited, time spent, cookies, and analytics.
• Advertising identifiers and metrics (e.g., Google Analytics, Meta/Facebook Pixel).

B) Application users

Depending on client configuration, we may process:

• Account and role data: name, corporate email or user ID, department, role, and permissions.
• Warehouse operation data: picking tasks, traceability events, order references, timestamps, performance metrics.
• Device information: model, OS, client-assigned device ID.

Optional permissions:

• Camera: for barcode/QR code scanning.
• Location: for route or task validation, if enabled by the client.

Purposes of Processing

We use personal data for:

• Responding to requests, scheduling demos, and providing customer support.
• Operating, maintaining, and improving the Scanley platform.
• Generating performance analytics and operational reports.
• Communicating updates, events, and product news.
• Authentication, access management, and security.
• Legal compliance and contractual obligations.

Legal bases include performance of a contract, legitimate interest, consent, and legal compliance, depending on jurisdiction.

Cookies and Similar Technologies

We use first- and third-party cookies to analyze website traffic, remember preferences, and improve user experience. You may disable cookies in your browser; however, some features may not function properly.

Data Sharing and Disclosure

We share personal data only in the following cases:

• Service providers: hosting, analytics, email delivery, marketing, support, under strict confidentiality agreements.
• Corporate operations: mergers, acquisitions, or restructuring.
• Legal compliance: to comply with laws, regulations, or lawful requests.
• Client companies: for users of the Scanley app, operational data is shared with their employer (the data controller).
• With consent: when you explicitly authorize it.

We do not sell personal information. Under CPRA, you may opt out of the sharing of personal data related to advertising cookies.

Data Retention

We retain data only as long as necessary to fulfill the purposes described and to comply with legal or contractual requirements. In the app, clients may define their own data retention policies.

Security

We apply administrative, technical, and physical safeguards such as TLS encryption, access controls, and activity logging. While no method is completely secure, CBQA continually improves its security practices.

Data Subject Rights

Depending on applicable law, you may exercise your rights to access, rectify, delete, limit, object, port, or withdraw consent.

• Website visitors: contact marketing@cbqasolutions.com.
• App users: contact your employer (the data controller). CBQA will support the client in processing your request.

Regional notes

• Mexico (ARCO rights): access, rectification, cancellation, opposition, and withdrawal of consent.
• Colombia: rights to know, update, correct, delete, and revoke consent.
• California: rights to know, correct, delete, opt-out of sale/sharing, and non-discrimination.

Children’s Privacy

Scanley and its website are intended for users aged 18 and older. If we discover data from minors, we will delete it immediately.

International Data Transfers

We may transfer data to the United States and other countries where our providers operate. Appropriate safeguards are implemented under applicable data protection laws.

Updates to This Notice

We may update this Privacy Notice periodically. The latest version will always be available on this page. Continued use after changes means acceptance of the revised notice.

Contact