Privacy Policy

1. Who We Are

This Privacy Policy applies to TurnKey Solutions And Consulting Inc. ("TurnKey Solutions," "we," "our," or "us"), a C Corporation incorporated in the United States. We operate the website qagate.io and provide technology services including AI bots and automation, custom management systems, website development, and QA and software testing.

This policy explains how we collect, use, store, and protect personal information from visitors to our website and clients who use our services.

2. What Data We Collect

We collect data in two ways: information you provide directly, and information collected automatically.

Information you provide directly

• Name — first and last name when you fill out a contact form, book a call, or create an account
• Email address — used for correspondence, project updates, and account access
• Phone number — if provided, used for calls, SMS, or WhatsApp communication
• Company name — to understand your business context
• Project details and messages — descriptions of your project, requirements, or business needs submitted through our forms or chatbot
• Case information — for clients in legal, immigration, or healthcare contexts, case numbers, case status, or document references as needed to deliver the contracted service
• Payment information — billing name and address; payment card details are processed by third-party payment processors and are not stored on our servers

Information collected automatically

• IP address and browser type — for security logging and analytics
• Pages visited and time on site — to understand how visitors use our website
• Referring URL — to understand how you found us
• Device type — desktop, mobile, or tablet, for technical optimization

3. How We Use Your Data

We use the information we collect for the following purposes:

• To respond to your inquiries and provide the services you have requested
• To send project proposals, progress updates, and invoices
• To communicate about your project via email, phone, or messaging platforms
• To manage ongoing client relationships and provide post-launch support
• To send service-related announcements (not promotional marketing without your consent)
• To improve our website and services based on usage patterns
• To comply with legal obligations, including applicable US laws and regulations
• To protect the security of our systems and prevent fraud or abuse

We will only use your data for the purposes stated above or for purposes you have separately consented to. We do not use your data for automated decision-making that produces legal or significant effects on you.

4. Third Parties We Share Data With

We share your data with third-party service providers only to the extent necessary to deliver our services. Each of these providers is contractually bound to handle your data in accordance with our privacy standards and applicable law.

Service providers and platforms we use

• Amazon Web Services (AWS) — cloud infrastructure, file storage, and database hosting for client management systems and application deployments
• Twilio — SMS and WhatsApp messaging delivery for AI bot and automation services
• PayPal — payment processing for invoices and service fees
• Zoom — video conferencing for discovery calls, project meetings, and client training sessions
• Calendly — scheduling and appointment booking for consultations
• Netlify — website hosting and form data collection for qagate.io
• Anthropic — AI model API used to power the Alex chatbot on our website; messages sent through the chatbot are processed by Anthropic's servers in accordance with their privacy policy
• USCIS API — for immigration technology clients who authorize us to connect their case management systems to USCIS services; this connection only operates under explicit client instruction and authorization

Legal disclosure

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of TurnKey Solutions And Consulting Inc., our clients, or the public.

5. We Do Not Sell Your Data

6. Data Retention Policy

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law.

• Inquiry and contact form data — retained for 2 years from last contact, then deleted or anonymized
• Active client project data — retained for the duration of the project plus 3 years after project completion, for support and legal purposes
• Financial and billing records — retained for 7 years to comply with US tax and accounting requirements
• Website analytics data — retained in aggregated, anonymized form indefinitely; individual session data is retained for 12 months
• Chatbot conversation data — not stored on our servers beyond the current session; messages are processed in real-time through our AI provider

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymized. You may request early deletion at any time (see Section 8).

7. Your Rights — Including Data Deletion

You have the following rights with respect to your personal data:

• Right to access — You may request a copy of the personal data we hold about you.
• Right to correction — You may request that we correct inaccurate or incomplete data.
• Right to deletion — You may request that we delete your personal data (see Section 8 for how to request this).
• Right to restrict processing — You may request that we limit how we use your data in certain circumstances.
• Right to data portability — You may request a machine-readable copy of data you have provided to us.
• Right to object — You may object to our use of your data for marketing communications at any time.
• Right to withdraw consent — Where we process your data based on consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us using the information in Section 15.

8. How to Request Data Deletion

You have the right to request that we delete your personal data. To submit a deletion request:

We will acknowledge your request within 5 business days and complete the deletion within 30 days of receiving your verified request. If we are unable to fulfill the request in full (for example, because some data is required for legal or financial compliance), we will notify you of the portion we are retaining and the legal basis for doing so.

Note: Deletion of your data may affect our ability to provide ongoing services. We will inform you of any such impact before proceeding.

9. Data Breach Notification

In the event of a data breach that is reasonably likely to result in risk to your rights and freedoms, we will:

• Notify affected individuals within 72 hours of becoming aware of the breach (or as soon as reasonably practicable)
• Describe the nature of the breach, the data affected, and the likely consequences
• Describe the measures we are taking to address the breach and mitigate its effects
• Provide a contact point for further information
• Report the breach to relevant regulatory authorities as required by applicable law

Notification will be provided by email to the address associated with the affected data, or by prominent notice on our website if individual notification is not possible.

10. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

Your California rights

• Right to Know — You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct — You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing — TurnKey Solutions And Consulting Inc. does not sell or share personal information. You therefore have no need to opt out, but we acknowledge this right.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.
• Right to Limit Sensitive Personal Information Use — We only use sensitive personal information to provide the services you have requested.

To exercise your California rights, contact us at info@qagate.io with "CCPA Privacy Request" in the subject line. We will respond within 45 days as required by law.

11. Policy Changes and Active Consent

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make material changes to this policy — particularly changes that affect how we collect, use, or share your personal data — we will:

• Post the updated policy on this page with a new "Last Updated" date
• Send an email notification to active clients with the changes summarized in plain language
• Where required by law, request your active consent to continue processing your data under the new terms
• Provide a minimum of 30 days' notice before material changes take effect

Your continued use of our services after a policy update constitutes acceptance of the new terms. If you do not agree to the updated policy, you may request deletion of your data before the changes take effect.

12. What Happens to Your Data If the Company Is Sold or Dissolved

In the event of a sale or acquisition

If TurnKey Solutions And Consulting Inc. is acquired by or merged with another company, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you by email and/or prominent notice on our website at least 30 days before your data is transferred. The acquiring entity will be required to honor the commitments made in this Privacy Policy.

You will have the opportunity to request deletion of your data before any transfer occurs.

In the event of dissolution

If TurnKey Solutions And Consulting Inc. ceases to operate, we will provide at least 30 days' written notice to all clients and data subjects. All personal data not required for legal compliance will be securely deleted. Any data retained for legal compliance purposes will be handled by a designated data custodian and deleted as soon as the legal retention period expires.

13. Cookies and Tracking

Our website uses essential cookies for basic functionality (such as remembering form inputs). We do not use advertising cookies or cross-site tracking technologies.

We may use analytics tools (such as aggregated website traffic data) to understand how visitors use our site. This data is anonymized and not linked to individual identities.

You can control cookies through your browser settings. Disabling non-essential cookies will not affect the core functionality of our website.

14. Children's Privacy

Our services are intended for business clients and professionals. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe we have collected data from a child under 18, please contact us at info@qagate.io.

15. Contact Us for Privacy Requests

For all privacy-related inquiries, requests, or complaints, please contact us using the information below. We are committed to responding promptly and resolving your concerns.