Privacy Policy
Effective: January 1, 2026
Qmulo, Inc. ("we," "our," or "us") operates the Lightbeam incident management and on-call platform. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our services, including our web app, mobile apps, and related services (collectively, the "Services").
1. Information We Collect
- Account information: Name, email address, and password (or identity provider data when using SSO).
- Organization data: Incident details, on-call schedules, directory entries, and related operational data you create within the Services.
- Device information: Device type, operating system, and push notification tokens for delivering alerts.
- Usage data: Logs of actions within the Services (e.g., sign-in events, incident creation) for security, support, and service improvement.
2. How We Use Your Information
We use the information we collect to provide, operate, and improve the Services; authenticate users; send push notifications and emails; respond to support requests; enforce our terms; and comply with legal obligations. We do not sell your personal information.
3. Data Sharing and Disclosure
We may share data with service providers that assist in operating the Services (e.g., cloud hosting, push notification delivery). These providers are contractually bound to use data only for the purposes we specify. We may disclose information when required by law or to protect our rights, safety, or property.
4. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services. Organizations can configure retention policies for incidents and directory data to align with their governance requirements. We may retain certain information after account closure for legitimate legal, security, or business purposes.
5. Data Security
We use industry-standard measures to protect your data, including encryption in transit and at rest. Organizations may use their own database infrastructure (tenant-hosted database) so that their data remains within their control and never leaves their systems.
6. Your Rights and Choices
- Access and correction: You can view and update your account information within the Services.
- Deletion: You may request deletion of your account and associated data by contacting us at contact@qmulo.ai.
- Push notifications: You can disable push notifications in your device settings.
7. Children's Privacy
The Services are not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at contact@qmulo.ai and we will take steps to delete it.
8. International Transfers
We may transfer and process data in the United States and other countries. By using the Services, you consent to such transfers. Organizations using tenant-hosted databases retain control over where their data is stored.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the Services or by email. Continued use of the Services after such changes constitutes acceptance of the updated policy.
10. Contact Us
For questions about this Privacy Policy or our data practices, contact us at contact@qmulo.ai.
