Privacy policy

Who we are

Unlisted is provided by No Quarter B.V., based in Amsterdam, Netherlands. You can contact us about privacy at info@noquarter.co.

Organizations use Unlisted to manage their own operations. If your data appears in an organization’s guest list, purchase, booking, profile, or billing records, that organization determines how those records are used, and we provide the tools to process them. The organization’s own privacy notice also applies. Contact them about their records; we can help direct your request.

Data we process

• Account information, including your name, email address, account identifier, sign-in provider, and organization membership.
• Information you or your organization enter into Unlisted, such as events, attendees, check-ins, profiles, products, stock movements, tabs, orders, bookings, contact and billing details, notes, messages, and uploaded files.
• Transaction information, including amounts, payment references, payment status, and refund status.
• Technical and usage information, such as IP addresses, device and app information, interactions, screens or pages visited, and errors or crash diagnostics. Usage records can be associated with your account identifier, email address, and organization.
• Information you send when contacting us for support.

How we use data

We use this information to authenticate users, apply access permissions, provide the features an organization uses, process and reconcile transactions, deliver service emails, answer support requests, and maintain the reliability and security of the service. Usage and diagnostic data help us understand how the product is used and investigate problems. Some features also validate VAT numbers or extract details from uploaded invoices.

Depending on the activity, processing is necessary to provide the service under our agreement, comply with legal obligations, or pursue legitimate interests in operating, securing, and improving the service.

Sign-in, camera access, and device storage

WorkOS manages sign-in. If you choose a provider such as Google or Apple, the provider shares the account information allowed by that sign-in flow. Sign in with Apple can provide a private relay email address when you choose to hide your email.

Unlisted Ops requests camera access to scan ticket and operations-access QR codes. The scanned code is used to find the relevant record or establish the permitted access. The app does not provide photo or video recording features.

The app stores authentication-session information using your device’s secure storage and keeps local preferences. The website uses cookies or similar storage for sign-in and preferences, and our analytics service uses identifiers to understand usage. You can manage camera permissions and website storage through your device or browser settings.

Service providers and sharing

The providers involved depend on the features you or your organization use:

• WorkOS handles sign-in and account information.
• Convex stores application records and uploaded files and runs backend services.
• Mollie processes payments and related transaction information.
• Resend receives email recipients and message content to deliver service and organization emails.
• Vercel hosts the website and processes web requests.
• Expo distributes app builds and updates and receives technical app and device information.
• PostHog receives usage information, account identifiers, and error or crash diagnostics.
• Invoice extraction uses Vercel AI Gateway and its model providers, with an OpenAI model. Invoice text or the uploaded document is sent for extraction and may contain personal or financial information.
• vatlayer receives VAT numbers for validation.

Payment-card details are handled through the payment provider. Unlisted records order information and payment references and status. Organization members can access records according to their permissions, and recipients of shareable links can access the information and actions provided by those links.

We may also disclose information where required by law or necessary to address fraud, security incidents, or legal claims. Our service providers may process information in other countries. Contact us for information about the processing locations and transfer arrangements relevant to your use of the service.

Retention

We retain information for the purposes described in this policy, including providing the service, resolving support or transaction issues, protecting accounts, and meeting applicable recordkeeping obligations. Retention depends on the type of record and the organization’s requirements. Some transaction or audit records may need to remain after an account is closed. Contact us for information about a particular record or a deletion request.

Your rights and choices

Depending on the law that applies, you may request access to, correction of, or deletion of your personal data, restrict or object to processing, or request a portable copy. Where processing relies on consent, you can withdraw that consent. We may need to verify your identity before fulfilling a request.

Contact info@noquarter.co to make a request. You can also raise a concern with your local data-protection authority; in the Netherlands this is the Autoriteit Persoonsgegevens.

Changes and contact

We may update this policy as the service changes. The date above identifies this version. For questions about the product or this policy, visit Support or email info@noquarter.co.