How Qourus handles your data

1. Who we are

PollPulse Ja Limited (“we”, “us”, “our”) operates Qourus, the survey and rewards platform at pollpulse-gold.vercel.app. Qourus is a service of PollPulse Ja Limited, the data controller for your personal data.

• Company: PollPulse Ja Limited
• Registered in: Jamaica
• Contact email: info@pollpulseja.com
• Supervisory authority: Office of the Information Commissioner (OIC), Jamaica — oic.gov.jm

Questions about this policy or your data? Email info@pollpulseja.com. We aim to respond within 30 days.

2. What personal data we collect

We collect only what we need to run surveys, pay rewards, and keep the platform safe.

• Account data: display name, email address, account type (consumer or brand). Passwords are stored hashed by Firebase Auth — we cannot read them.
• Profile data: eligibility country (“JM”), age confirmation.
• Survey data: answers you submit, completion timestamps, reward amounts earned.
• Reward data: balance and reward status.
• Device and security data: IP address and approximate country (used for the Jamaica-only eligibility gate), the general location of your device at survey time (your parish, never your street address, used only for campaign analytics), sign-in timestamps.
• Support data: messages you send us at info@pollpulseja.com.

We do not use analytics, advertising cookies, or third-party tracking. We do not set cookies beyond what Firebase Auth requires for your session.

3. Why we use your data (purposes and legal bases)

4. Who we share data with (processors)

Two processors. Both are bound by Data Processing Agreements and act only on our instructions.

• Google Firebase / Google Cloud Platform — authentication and Firestore database. Data may be stored on Google servers outside Jamaica. Google's Data Processing Terms apply.
• Vercel Inc. — website hosting. Logs may contain IP addresses.

We do not sell your data. We do not share it with advertisers. We disclose data only if required by Jamaican law or a valid court order.

5. International data transfers

Your data is stored on Google Cloud and may be processed in data centres outside Jamaica (including the United States). When we transfer your data outside Jamaica we rely on:

• The processor's Standard Contractual Clauses and Data Processing Addenda;
• Equivalent safeguards: encryption in transit and at rest, strict access controls, least-privilege.

By using Qourus you understand your data may be processed outside Jamaica under these safeguards.

6. How long we keep your data (retention)

“Last activity” means the last time you signed in, submitted a survey, or redeemed a reward. After 36 months of inactivity, your account is anonymized or deleted. You can request earlier deletion at any time (see Section 7).

7. Your rights (GDPR Articles 12–22 and JDPA, 2020)

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct data that is wrong or incomplete.
• Erasure (“right to be forgotten”) — ask us to delete your data, subject to legal retention rules.
• Restriction — ask us to pause processing while a complaint is resolved.
• Data portability — receive your data in a machine-readable format (JSON).
• Object — object to processing based on legitimate interest.
• Withdraw consent — withdraw any consent you gave us at any time, without affecting earlier processing.
• Complain — lodge a complaint with the Office of the Information Commissioner (OIC), Jamaica at oic.gov.jm.

To exercise any of these rights, email info@pollpulseja.com. We will respond within 30 days. Signed-in users can also export or delete their data directly from Profile → Privacy & Consent.

8. How consent works on Qourus

• Consent is granular: signing up requires consent to process your account data; marketing emails are optional and off by default.
• Consent is auditable: we record the version of this policy, your decision, and the timestamp.
• Consent is revocable: change your mind anytime in Profile → Privacy & Consent.
• Declining is not punished. If you decline required data processing at sign-up we cannot create your account — but existing users who revoke consent keep any rewards already earned before revocation. Deleting your account removes your profile, survey history, and reward balance (only tax records required by law are retained).

If you previously used Qourus but no longer have access to your account, you can still exercise your rights: email info@pollpulseja.com from the address you registered with, and we will verify your identity before acting.

9. Automated decision-making

Qourus does not use automated decision-making or profiling that produces legal effects. Reward calculations and eligibility checks are rule-based and transparent.

10. Children

Qourus is for users 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have, contact info@pollpulseja.com and we will delete it.

11. Security

• All traffic is encrypted in transit (HTTPS/TLS).
• Authentication is handled by Firebase Auth; passwords are hashed and never stored in plain text.
• Access to production data is limited to authorised team members under least-privilege rules.
• Consent records and survey responses are server-managed; browsers cannot modify them directly.

No system is perfectly secure. If we suffer a breach that affects your rights, we will notify you and the OIC within the time required by law.

12. Changes to this policy

We may update this policy. When we do, we will:

• Increase the version number and show the new “Effective date” at the top of this page;
• Ask existing users to re-confirm consent at next sign-in if the change is material.

13. Contact

PollPulse Ja Limited
Email: info@pollpulseja.com
Supervisory authority: Office of the Information Commissioner (OIC), Jamaica — oic.gov.jm