Privacy Policy

1. Who we are

Qudo (“we”, “us”) provides online booking and management software to businesses in Sri Lanka. This policy explains what information we collect and how we use it. For booking services, the Business you book with is the controller of your booking data; we process it on their behalf.

2. Information we collect

We collect:

• Business accounts: business name, owner/staff names, email, mobile number, and the settings, services and hours you configure.
• Customers: name, mobile number, and booking details (service, staff, date/time, and any deposit reference you enter).
• Usage & device data: basic logs needed to operate and secure the service.

3. How we use it

• To create and manage bookings and the live queue.
• To send booking-related messages (SMS, and WhatsApp where you opt in) such as confirmations, reminders and verification codes.
• To provide dashboards, analytics and billing to Businesses.
• To secure the service, prevent abuse and meet legal obligations.

4. Who we share it with

We share data only as needed to run the service: with the Business you booked with; with service providers who act for us — for example our SMS provider (text.lk) to deliver messages, and our payment provider (PayHere) to process Business subscription payments; and where required by law. We do not sell your personal data.

5. Payments

Business subscription payments are handled by PayHere; we do not store full card details. Customer deposits are paid directly to the Business (for example by LankaQR or bank transfer) and are not processed by Qudo.

6. Advertising & cookies

Public booking pages of Businesses on our free plan display advertisements served by Google AdSense. Google and its partners use cookies and similar technologies to serve and measure ads, which may be personalised or non-personalised depending on your location and choices; visitors in the EEA, UK and Switzerland are shown a consent message first. Learn how Google uses data at policies.google.com/technologies/partner-sites or manage ad personalisation at adssettings.google.com. Pages of Businesses on a paid plan do not show ads. Beyond this, we use only the cookies needed to operate the service (such as login sessions).

7. Retention

We keep booking and account information for as long as the account is active and as needed for the purposes above or to meet legal and accounting requirements. Businesses can request deletion of their account data, subject to those requirements.

8. Security

We use reasonable technical and organisational measures to protect your information. No system is perfectly secure, but we work to keep your data safe and to limit access to it.

9. Your choices

You can ask to access, correct or delete your personal data, or opt out of non-essential messages. Booking-related messages are part of providing the service. To make a request, contact us using the details below — note that the Business you booked with may also hold your data independently.

10. Children

Qudo is intended for businesses and their adult customers and is not directed at children.

11. Changes

We may update this policy from time to time; the effective date above shows when it last changed. Continued use of the service means you accept the updated policy.

12. Contact

Questions about this policy or your data? Email us at hello@qudo.lk or see our contact page.