Privacy policy

For the account, billing and usage data of businesses that sign up for Lineflow, Blackcube Agency AB is the data controller.

For the data of people who join a business's queue (queue visitors), the business running the queue is the data controller and we act as its data processor — we handle that data only to provide the queue service to the business. A data processing agreement is available on request at sales@lineflow.se.

Joining a queue is designed to work anonymously — no app, no account, no login:

• Ticket data — your ticket number, place in line and ticket status. Your ticket page uses a signed link that only you hold. It stops working a day after your visit.
• Name (optional) — only if you choose to enter one, so staff can greet you.
• Mobile number (optional) — only if you opt in to a text message when it is almost your turn. Used solely for that visit's notifications and sent through our SMS provider. Our SMS provider 46elks keeps a delivery record with the number for up to 90 days.
• Custom fields — some businesses ask additional questions when you join (for example a booking reference). These are collected with your explicit consent shown at the time, and the business is the controller for them.
• Review (optional) — after you are served you can rate the visit and add a comment. It is stored without your name, number or ticket, dated by day only, and kept for the business's plan window (7–365 days); the business can delete it sooner. Please don't write personal details in the comment.
• Notifications (optional) — if you turn them on, your browser's push service (Google, Apple or Mozilla) delivers them; the registration is deleted when your visit ends.
• Language preference — stored in a cookie so the page appears in your language.

Automatic erasure: personal details on a ticket (name, phone number, custom answers, notification registration) are erased automatically when your visit ends — when you are served, cancel, or don't show up — and abandoned tickets are scrubbed hourly. What remains is a record of the visit without your name or number (times, service, ticket number), which the business uses for statistics. It is kept according to the business's plan (7–365 days) and then deleted.

Backups: our database is backed up daily in the EU (Hetzner), and each backup is deleted after 30 days, so details erased in the meantime can remain in a backup until then.

• Account — your email address (sign-in is by a one-time code sent by email, or Google sign-in if you choose it), your name and a contact phone number if provided.
• Business content — queue names, opening hours, staff invitations (email + role), uploaded logos and ad images.
• Billing — handled by Stripe. We never see or store card numbers; we store your subscription state and Stripe customer reference.
• Usage & security logs — server logs and an audit trail of privileged actions (for example staff role changes), kept to run and secure the service.

• Essential cookies — a session cookie when you sign in to the dashboard (or on a tablet set up as a counter), and a language-preference cookie. No tracking or marketing cookies.
• Analytics — we use Simple Analytics, a privacy-first, cookie-less service that stores no personal data and cannot identify you. Its script isn't loaded at all on queue, ticket and TV pages.
• Bot protection — the sign-in and contact forms, and the join page of a queue that offers texts, use Cloudflare Turnstile to block abuse; it may process your IP address for that purpose.

Because we use no tracking cookies, there is no cookie banner — there is nothing to consent to.

Lineflow is hosted in the EU (Hetzner, Germany/Finland), including our database, realtime infrastructure and file storage. We use these sub-processors:

• Hetzner Online GmbH (EU) — hosting, database, storage
• Stripe (payments; card data never touches our servers)
• Resend (transactional email: sign-in codes, staff invites, contact-form messages)
• 46elks AB (Sweden) — SMS notifications
• Cloudflare (Turnstile bot protection on forms)
• Simple Analytics (EU) — cookie-less website analytics
• Sentry (data stored in the EU) — error reports from our servers, without customer details
• Google, Apple and Mozilla — browser push notifications, only if you turn them on

Where a provider processes data outside the EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

• Performance of a contract — providing the queue service and your account (GDPR art. 6(1)(b)).
• Consent — optional phone number for SMS, custom intake fields (art. 6(1)(a)); you can withdraw it by leaving the queue or contacting the business.
• Legitimate interest — service security, abuse prevention, aggregate statistics (art. 6(1)(f)).
• Legal obligation — bookkeeping records for billing (art. 6(1)(c)).

You have the right to access, rectify, erase, restrict, object to processing of, and receive a copy of your personal data. Businesses can export their data from the dashboard and delete their account, which erases their business and its data; we keep only invoices, for as long as bookkeeping law requires (7 years), and the email address used for a free trial, so that each address gets one trial. Queue visitors: because tickets are erased automatically after the visit, there is usually nothing left to delete — for anything else, contact the business you queued with, or us at sales@lineflow.se.

You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your local supervisory authority.

We will update this policy when our data handling changes and adjust the date above. Questions: sales@lineflow.se or Blackcube Agency AB, Skräddarebyn 3B, 218 42 Bunkeflostrand, Sweden.