Legal

Privacy Policy

Last updated: 28 September 2026

Who we are

This website is operated by QUE UP d.o.o., Reg. no. 67375378, PIB 114172540, Novi Pazar, Serbia (“QueUp”, “we”). We are the controller of the personal data described below. For any privacy question, write to hello@queupsoftware.com.

What we collect

  • Contact form — your name, email, project description, and (optionally) budget range.
  • Startup Partnership application — your name, email, company or idea name, and the answers you give about your product, validation, funding, and links.
  • Product waitlist — your email address.
  • Intro-call booking — if you book through the embedded Calendly scheduler, Calendly collects your name, email, and the details you enter, and shares them with us.
  • Technical data — our hosting provider keeps standard server logs (IP address, browser, time of request) for security and troubleshooting. We use the IP address briefly to limit form spam.

Why we use it, and on what legal basis

  • To reply to your inquiry or application and to prepare for a possible engagement — steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).
  • To tell you when a product on our waitlist opens — your consent (Art. 6(1)(a)), which you can withdraw at any time.
  • To keep the site secure and free of spam — our legitimate interest (Art. 6(1)(f)).

What we don't do

We don't sell your data, don't add you to marketing lists you didn't ask for, and don't run advertising or analytics trackers on this site. Our own pages set no cookies.

Who processes it for us

We share data only with the service providers needed to run the site:

  • Railway (USA) — website hosting.
  • Resend (EU region, USA-based company) — delivers form submissions to our inbox by email.
  • ImprovMX — forwards mail sent to hello@queupsoftware.com to our inbox.
  • Google Workspace / Gmail (USA) — the mailbox where we receive and answer messages.
  • Calendly (USA) — intro-call scheduling. The embedded scheduler on the contact page is loaded from Calendly and may set its own cookies; see Calendly's privacy notice.

Transfers to the USA rely on the EU–US Data Privacy Framework or Standard Contractual Clauses offered by these providers.

How long we keep it

  • Inquiries and applications that don't lead to a project — up to 24 months, then deleted.
  • Correspondence with clients — for as long as the business relationship and legal record-keeping require.
  • Waitlist emails — until the product launches or you ask to be removed.

Your rights

Under the GDPR and Serbia's Law on Personal Data Protection (ZZPL) you can ask us to access, correct, delete, or export your data, to restrict or object to its processing, and to withdraw consent at any time. Email hello@queupsoftware.com and we'll respond within 30 days.

You can also complain to a supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the data protection authority in your EU country.

Changes

If we change this policy, we'll update it here and change the date at the top.