Privacy Policy

Last updated: November 2, 2026

For businesses in the United States · Numiqa Global, Inc.

Contents

  1. 1. Who we are
  2. 2. Data you upload about others
  3. 3. Information we collect
  4. 4. How we use information
  5. 5. AI processing
  6. 6. Text messages and your mobile number
  7. 7. How we share information
  8. 8. Where information is processed
  9. 9. Retention
  10. 10. Security and breach notification
  11. 11. Your choices and rights
  12. 12. Children
  13. 13. Cookies, advertising and Do Not Track
  14. 14. Changes to this policy

1. Who we are

This Privacy Policy explains how Numiqa Global, Inc. ("Numiqa", "we", "us"), a Delaware corporation, handles personal information when businesses in the United States use the Numiqa platform, website and apps. Registered office: 131 Continental Dr, Suite 305, Newark, DE 19713, United States Mailing address: 1908 Thomas Ave STE 83767, Cheyenne, WY 82001, United States Privacy contact: hola@numiqa.com, with the subject "Privacy request". Businesses based in Spain are covered by the Spanish Privacy Policy published at numiqa.com/privacidad.

2. Data you upload about others

Our customers upload information about their own employees, customers and suppliers (for example invoices, schedules, time records or payroll documents). We process that information as a service provider of the customer, only to provide the Service and following its instructions, as described in section 12 of our Terms of Service at numiqa.com/terms. We do not sell it and we do not use it for our own advertising. The customer decides what it uploads and is responsible for informing those people. Requests from them should go first to the business that uses Numiqa; we will help that business respond.

3. Information we collect

— Sign-up: name, email, mobile number, business details and tax ID (EIN), and password (stored as an irreversible hash) — Acceptance of the Terms: accepted version, date and time, IP address and browser, as a record of the contract — Payments: billing name and address and the payment details needed to charge you. Card numbers are collected and stored by Stripe, not by Numiqa — Use of the Service: documents uploaded, inventory, purchasing, invoicing, team and activity data — Mobile app: photos and files you choose, location when clocking in only if your organization enables it and you allow it, and a device token if you turn on notifications — Technical: IP address, device, browser, logs and technical cookies — Analytics: how you use the website and the Service, only if you accept analytics cookies

4. How we use information

— To provide the Service you contracted, manage your account and bill you — To verify your email and mobile number when you sign up — To send service and security notices — To provide support — To prevent fraud and protect the security of the Service — To improve the Service — To meet legal, tax and accounting obligations — To send commercial communications only if you have agreed to receive them

5. AI processing

Features that read documents or answer questions send the content needed for each request to Google Cloud Vertex AI, which processes it on our behalf. Under its terms, Google does not use that content to train its models. We do not use Your Data to train general-purpose AI models.

6. Text messages and your mobile number

We use your mobile number to send you a one-time verification code by text message (SMS) or, when SMS is not available, by WhatsApp when you sign up. Message and data rates may apply. Reply STOP to stop receiving messages and HELP for help. We do not share or sell mobile numbers or text message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with the providers that deliver our messages (our SMS provider and, for WhatsApp, Meta), and only to deliver them.

7. How we share information

We share information only with the providers we need to operate the Service, which receive only what they need for their service and are bound by contractual data protection obligations: — Amazon Web Services: hosting, databases, file storage and email delivery — Stripe: payments, invoices and receipts — Google Cloud (Vertex AI): AI processing — Our SMS provider and Meta (WhatsApp): verification codes and messages — Apple and Google: push notifications in the mobile apps — PostHog and Google (through Google Tag Manager): product and website analytics, only if you accept analytics cookies We may also disclose information when required by law or to protect the rights and safety of our customers, our users or Numiqa, and to a successor in a merger, acquisition or sale of assets, which will remain bound by this policy. We do not sell personal information for money. See section 13 on advertising cookies.

8. Where information is processed

Numiqa is operated from the United States and Spain. Our main databases and file storage are hosted by Amazon Web Services in the European Union (Ireland), and some providers process information in the United States and other countries. Your information may therefore be stored and processed outside your state or country. We apply the safeguards required by applicable law to those transfers.

9. Retention

We keep information as long as needed to provide the Service, meet legal obligations or respond to requests. — Account data: while the relationship lasts and for the period needed for support or legal claims — Billing and transactions: for the periods required by tax and accounting rules — Business documents: while your account is active; after your subscription ends we delete or return them within 30 days of a written request, except what we must keep by law. Copies in backups are deleted as the backups rotate — Technical and security logs: for as long as needed for operations, diagnostics and security — Marketing: until you withdraw your consent

10. Security and breach notification

We apply technical and organizational measures to protect access to and operation of the Service: — User authentication — Roles and permissions — Logical separation between organizations — Encrypted connections — Operational logs and incident review If a security breach affects your personal information, we will notify you as required by law. Under Florida law, notice to affected individuals is given no later than 30 days after a breach is determined. When the breach affects information a customer uploaded, we notify that customer so it can inform the people concerned.

11. Your choices and rights

You can access and update most account information inside Numiqa. You may also ask us to access, correct, delete or provide a copy of your personal information, or to stop commercial communications, by writing to hola@numiqa.com with the subject "Privacy request". Residents of states with a consumer privacy law may have additional rights where that law applies to us, such as opting out of targeted advertising or the sale of personal information. We will verify your identity before responding, answer within 45 days (extendable by another 45 days when reasonably necessary, with notice) and not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with your signed permission. If we decline your request, you can appeal by replying with the subject "Privacy appeal". We will answer the appeal within 60 days and, if we deny it, explain how to contact your state attorney general. If your information was uploaded by a business that uses Numiqa (for example your employer), send your request to that business; we will help it respond.

12. Children

Numiqa is a service for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18.

13. Cookies, advertising and Do Not Track

We use technical cookies and local storage needed for sessions, preferences and the operation of the application. With your consent we also use analytics (our own analytics, PostHog and Google Analytics through Google Tag Manager) to understand usage and errors and improve the product. Google Tag Manager loads on public pages with consent denied by default: no analytics or advertising cookies are written until you accept. When you accept cookies in the banner, the same consent also allows Google tags to measure our advertising campaigns, and Google may use that information for advertising under its own policies. Under some state laws this may count as targeted advertising or "sharing". You can refuse or withdraw this consent at any time in the cookie banner or on our Cookie Policy page at numiqa.com/cookies (in Spanish). We do not currently respond to browser "Do Not Track" or Global Privacy Control signals; the cookie banner is how you control these cookies.

14. Changes to this policy

We will notify you of any significant change by email or inside Numiqa at least 30 days in advance.
Terms of Service·Privacy Policy·Numiqa in Miami·Customers in Spain (Spanish)

We use first-party analytics and PostHog to understand usage and improve the product. They only run if you accept. Learn more

Numiqa Privacy Policy (United States)