Privacy policy

For the account, billing and usage data of businesses that sign up for Lineflow, Blackcube Agency AB is the data controller.

For the data of people who join a business's queue (queue visitors), the business running the queue is the data controller and we act as its data processor — we handle that data only to provide the queue service to the business. A data processing agreement is available on request at sales@lineflow.se.

Joining a queue is designed to work anonymously — no app, no account, no login:

• Ticket data — your ticket number, place in line and ticket status. Your ticket page uses a signed link that only you hold.
• Name (optional) — only if you choose to enter one, so staff can greet you.
• Mobile number (optional) — only if you opt in to a text message when it is almost your turn. Used solely for that visit's notifications and sent through our SMS provider.
• Custom fields — some businesses ask additional questions when you join (for example a booking reference). These are collected with your explicit consent shown at the time, and the business is the controller for them.
• Language preference — stored in a cookie so the page appears in your language.

Automatic erasure: personal details on a ticket (name, phone number, custom answers) are erased automatically when your visit ends — when you are served, cancel, or don't show up — and abandoned tickets are scrubbed on a schedule. What remains is anonymous statistics (for example how long the wait was), retained according to the business's plan (7–365 days) and then purged.

• Account — your email address (sign-in is by emailed magic link, or Google sign-in if you choose it) and your name if provided.
• Business content — queue names, opening hours, staff invitations (email + role), uploaded logos and ad images.
• Billing — handled by Stripe. We never see or store card numbers; we store your subscription state and Stripe customer reference.
• Usage & security logs — server logs and an audit trail of privileged actions (for example staff role changes), kept to run and secure the service.

• Essential cookies — a session cookie when you sign in to the dashboard, and a language-preference cookie. No tracking or marketing cookies.
• Analytics — we use Simple Analytics, a privacy-first, cookie-less service that stores no personal data and cannot identify you. Queue visitor and ticket pages are excluded from analytics entirely.
• Bot protection — the sign-in and contact forms use Cloudflare Turnstile to block abuse; it may process your IP address for that purpose.

Because we use no tracking cookies, there is no cookie banner — there is nothing to consent to.

Lineflow is hosted in the EU (Hetzner, Germany/Finland), including our database, realtime infrastructure and file storage. We use these sub-processors:

• Hetzner Online GmbH (EU) — hosting, database, storage
• Stripe (payments; card data never touches our servers)
• Resend (transactional email: sign-in links, staff invites)
• 46elks AB (Sweden) — SMS notifications
• Cloudflare (Turnstile bot protection on forms)
• Simple Analytics (EU) — cookie-less website analytics

Where a provider processes data outside the EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

• Performance of a contract — providing the queue service and your account (GDPR art. 6(1)(b)).
• Consent — optional phone number for SMS, custom intake fields (art. 6(1)(a)); you can withdraw it by leaving the queue or contacting the business.
• Legitimate interest — service security, abuse prevention, aggregate statistics (art. 6(1)(f)).
• Legal obligation — bookkeeping records for billing (art. 6(1)(c)).

You have the right to access, rectify, erase, restrict, object to processing of, and receive a copy of your personal data. Businesses can export their data from the dashboard and delete their account, which erases their data. Queue visitors: because tickets are erased automatically after the visit, there is usually nothing left to delete — for anything else, contact the business you queued with, or us at sales@lineflow.se.

You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.

We will update this policy when our data handling changes and adjust the date above. Questions: sales@lineflow.se or Blackcube Agency AB, Skräddarebyn 3B, 218 42 Bunkeflostrand, Sweden.