Last updated: July 4, 2026
CrownQC (the "Service") is currently operated by Vincent Riddell, Heinrich-Heine-Platz 12A, 10179 Berlin, Germany ("we", "our", or "us"), pending incorporation of Crown Quality Control, a Hong Kong company that will assume operation of the Service. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our quality control inspection platform.
For your account information (such as your name and email), we act as a data controller and decide how it is processed. For the inspection data you and your colleagues enter, your organization is the controller and we act as a processor, handling that data on the organization's behalf and under its instructions. If you are an individual whose personal data appears in an organization's inspection records, please direct privacy requests to that organization; we will assist them as their processor.
Account information: When you create an account, we collect your name, email address, and organization details.
Inspection data: Reports, samples, photos, defect observations, and other quality control data you enter into the platform.
Usage data: We use Umami, a privacy-focused analytics tool that does not use cookies and does not collect personal data. It provides us with aggregate, anonymized website usage statistics only.
Diagnostic data: The web and mobile applications and our backend use Sentry to collect crash reports, performance information, technical error details, and diagnostic context needed to identify and correct failures. This context may include account, record, organization, and user identifiers associated with the affected operation. On the web application, an error may also trigger a privacy-masked replay of interface interactions surrounding the error.
Where the EU or UK GDPR applies, we rely on the following legal bases to process personal data:
We never sell or share data that identifies you or your organization. We do not sell your personal information or inspection data, and we do not share it with third parties for their own marketing purposes. Your inspection data belongs to your organization.
We use the following service providers to operate the platform:
We operate globally, and we and our service providers may process your data in countries other than your own - including the United States and other locations where our providers (Cloudflare, Neon, Postmark, PowerSync, and Sentry) operate. Where we transfer personal data from the European Economic Area, the United Kingdom, or another region with data-transfer restrictions to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards - such as the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) - together with our providers' data-processing terms.
We create aggregated, anonymized statistics and benchmarks from data across the platform (for example, average defect rates by commodity, variety, or region). This data is irreversibly anonymized - it cannot be traced back to you, your organization, or any individual, and we suppress figures derived from small numbers of organizations so that no party can be singled out. Because it is no longer personal or identifiable data, we may use it for our legitimate business purposes. We never include data that identifies you or your organization.
We retain your account and inspection data for as long as your account is active. To delete your account or request erasure of your personal data, contact us at support@crownqc.com. We will erase or anonymize your personal data within a reasonable period, except where we must retain it to meet legal obligations or as part of your organization's inspection records and audit history (for example, reports you authored remain with the organization that owns them). Aggregated, anonymized statistics that cannot identify any individual or company may be retained indefinitely.
We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure authentication, and role-based access controls. Inspection data is scoped to your organization and accessible only to authorized members. If we become aware of a personal data breach affecting you, we will notify the relevant parties - and, where required, the competent supervisory authority and affected individuals - without undue delay and in accordance with applicable law.
Depending on your location, you may have the right to:
You can update your account details directly in the platform, or email us at support@crownqc.com to exercise any of these rights. We aim to respond within 30 days. Where your personal data forms part of an organization's inspection records, we may direct your request to that organization as the controller.
CrownQC does not use tracking cookies. Our analytics provider (Umami) is cookie-free and privacy-focused. Authentication sessions are managed through secure HTTP-only session tokens.
CrownQC is in the process of being incorporated as Crown Quality Control, a company to be registered in Hong Kong. When incorporation completes, our rights and obligations under this Privacy Policy - and our role as data controller for your account information - will transfer to that entity. Your personal data may be transferred to it (or to a successor entity in connection with a reorganization, merger, or acquisition) as part of that transfer. We will post the new controller's details on this page and, where required by law, notify you of the change. The protections in this Privacy Policy continue to apply to your personal data following any such transfer.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.
If you have questions about this Privacy Policy, please contact us at support@crownqc.com.