Privacy Policy

1. Who we are

KornerIQ is operated by EbroadwayIT ("we", "us", "our"). We provide a compliance and staff management platform for UK small businesses. If you have any questions about this policy, contact us at admin@ebroadway.com.au.

2. What data we collect

We collect information you provide when you sign up or use KornerIQ, including:

• Account information: name, email address, business name
• Employee data you enter: names, dates of birth, visa details, right-to-work documents
• Documents and payslips you upload
• Usage data: pages visited, features used, login times
• Payment information (processed securely by Stripe — we never store card details)

3. How we use your data

We use your data to:

• Provide and improve the KornerIQ service
• Send compliance alerts and reminders
• Process billing and payments
• Respond to support requests
• Comply with legal obligations

We do not sell your data to third parties.

4. Data storage and security

Your data is stored securely using Supabase (PostgreSQL) with row-level security ensuring your data is never accessible to other tenants. All data is encrypted in transit (TLS) and at rest. We use two-factor authentication and maintain a full audit trail of all data access.

5. Data retention

We retain your data for as long as your account is active. When you close your account we will delete your data within 30 days, except where we are required to retain it by law.

6. Your rights under GDPR

As a UK/EU data subject you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to certain uses of your data

To exercise any of these rights, email admin@ebroadway.com.au. We will respond within 30 days.

7. Cookies

We use essential session cookies to keep you signed in. We do not use advertising or tracking cookies. No third-party analytics cookies are placed without your consent.

8. Third-party services

We use the following trusted third parties to operate the service:

• Supabase — database and authentication hosting
• Vercel — application hosting
• Stripe — payment processing
• OpenAI — AI assistant (data sent is anonymised query context only)

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the app. Continued use of KornerIQ after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or to exercise your rights, contact us at:
admin@ebroadway.com.au