NetQnect Privacy Notice

Version date: 20 September 2026.

Effective date: 20 September 2026, applying only when this exact revision is published.

Controller: Just Try AI Ltd., registered in England and Wales, company number 14773048.

Registered address: 38 Cranford Gardens, Middlesbrough, Cleveland, United Kingdom, TS5 8AQ

Privacy contact: legal@netqnect.com

Delete your account or data — instructions for requesting deletion, including without the app.

Privacy at a glance

1. We collect account, profile, networking and service information you provide or create. 2. Organisers, other users and connected services may also provide information about you. 3. We use it to run NetQnect, provide requested assistance and protect the service. 4. Other people see information according to the feature and applicable Profile or sharing controls. Registering for a listed Event makes your selected public Profile visible to signed-in NetQnect Members. 5. Our service providers process information needed for hosting, AI, security and communications. 6. Core hosting is in London; we are moving AI inference to Google Cloud's EU region, and some services process data elsewhere. 7. Optional analytics and connected services have their own controls in Privacy Settings. 8. We keep information for its stated purpose and remove it when that purpose ends, subject to limited lawful exceptions. 9. Delete your account in the app or email legal@netqnect.com; you can also request access, correction or other privacy rights. 10. Complain to legal@netqnect.com or the Information Commissioner's Office at ico.org.uk.

1. About This Notice

This Privacy Notice explains how NetQnect collects, uses, stores and shares personal data when people use the NetQnect website, mobile apps, web app, AI Assistant, profiles, QR and Qnect features, event features, team features and related services.

It should be read with the Terms and Conditions, Cookie Notice, AI Processing Notice, AI Lawful Basis Summary, Subprocessors list and Data Retention Schedule.

2. Personal Data We Collect

We may collect and process:

• Account data, such as name, email address, authentication identifiers, account settings and security information.
• Profile data, such as job title, organisation, biography, profile image, uploaded media, skills, interests, social links, contact fields, networking goals and profile visibility choices.
• Contact and relationship data, such as Qnect requests, QR scans, connections, invitations, user-to-user message content and metadata where messaging is enabled, follow-ups, reminders, notes, tasks, opportunities, relationship context and communication metadata.
• Event data, such as event registration, the public Profile selected for an Event, attendance, attendee matching, ticket or claim metadata, organiser details, check-ins and external event-platform references.
• Team and organisation data, such as team membership, roles, invitations, team profiles, activity and administrator actions.
• AI interaction data, such as assistant prompts, messages, generated outputs, recommendation context, review signals, feedback and AI trace data.
• Connected-account data, such as authorised calendar and event-platform connection metadata, access tokens, imported public profile fields and integration status. Google Calendar and Microsoft Calendar are optional connections: we do not connect a calendar from NetQnect sign-in or profile data. If the user selects a provider, completes its OAuth flow and enables a Calendar capability, this may include the provider account label, OAuth token records, selected calendar id/label metadata, bounded free/busy availability results, Calendar capability preferences, consent records, sync logs and NetQnect-created provider event references. NetQnect does not import full calendar history or raw event content for availability checks. Connected calendar information is used only for the scheduling functions you authorise. Disconnecting removes the NetQnect connection and its stored credentials, stopping future access through that connection. You may also need to remove NetQnect access in your provider account. Disconnecting does not itself delete your provider calendar or all previously created events; applicable retained records are handled through our privacy rights process.
• Device, usage and security data, such as app version, device identifiers, diagnostics, crash data, performance data, fraud-prevention signals, IP address, logs and service activity.
• Location data, where you enable meeting-location capture: the current capture flow uses device coordinates temporarily to find place details and retains the derived place name, city, region, country or postcode, with capture time and source/precision metadata. It does not retain the device coordinates or accuracy radius in new coarse meeting-location records. Earlier records may contain coordinates or accuracy information; these remain personal data covered by our retention and rights processes.
• Billing and commercial data, where paid plans are used, such as plan, subscription status, invoices, payment processor identifiers and billing contact information.
• Contact-form and support data, such as name, email address, enquiry type, message content and support correspondence.

We receive data directly from you, from your use of NetQnect, from people who interact with you, from team administrators and event organisers, and from services you or an authorised organiser connect. Those sources may provide contact details, membership or attendee details, messages and relationship context. Public information is used only where the relevant feature supports it; it is still personal data. GitHub and LinkedIn account imports are not part of the launch scope. A provider being named here does not mean that its optional integration is currently available or connected.

Information needed to use the service

Account authentication and the information necessary for a requested feature are needed to provide that service. If you do not provide them, we may be unable to create the account or complete that feature. Optional profile fields, optional analytics and optional connected accounts are not a condition of using unrelated features. We explain any legally required information, such as billing information if a paid service is offered, when collecting it.

If we obtain information about you indirectly, we provide applicable privacy information within the required period, normally no later than one month, or earlier at first communication or disclosure where required. Organiser authorisation does not replace our own transparency duties. You can ask us about the source of information relating to you.

Google connected-service information

NetQnect's use of information received from Google Workspace APIs adheres to the Google Workspace user data and developer policy, including its Limited Use requirements. Connected calendar data is used only for the scheduling features you authorise. This statement does not replace the specific disclosures and choices described above.

3. Why We Use Personal Data

We use personal data to:

• provide accounts, authentication and security;
• create, update, display and share profiles;
• support QR sharing, Qnect requests, invitations and connection workflows;
• provide user-to-user messaging where enabled, including delivery, read, archive and safety controls;
• provide event, attendee, organiser and check-in features;
• provide team and organisation features;
• provide relationship CRM, notes, reminders, follow-up and opportunity features;
• provide the AI Assistant, AI matching, AI recommendations and profile assistance;
• provide optional connected-service features, such as checking bounded calendar availability or writing confirmed NetQnect meetings to a connected calendar only where the user has enabled the relevant calendar capability;
• personalise the service and recommend relevant people, events or actions;
• maintain, debug, protect and improve the service;
• send service messages and respond to support requests;
• manage plans, billing, invoices and entitlement checks;
• meet legal, regulatory, tax, accounting and security obligations;
• investigate misuse and enforce the Terms and Conditions.

4. Lawful Bases

We rely on different lawful bases depending on the purpose.

• Contract: where processing is needed to provide the NetQnect service requested by the user, such as account access, profile features, QR sharing, Qnect requests, event participation, assistant chat requested by the user and paid-plan administration.
• Legitimate interests: where processing is needed for service security, fraud prevention, service improvement, product diagnostics, AI safety review, embeddings, attendee discovery and limited recommendation features, relationship insights, business administration and support, provided those interests are not overridden by user rights.
• Consent: for optional analytics and diagnostic collection where enabled, and where required for optional connected-service processing. Authorising OAuth access is not by itself the lawful basis for every later use of provider data.
• Legal obligation: where we must process data to meet legal, tax, accounting, regulatory or rights-request obligations.

Your right to object

You can object to processing based on legitimate interests, including non-essential profiling, through privacy settings or legal@netqnect.com. We assess your circumstances and stop unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed for legal claims. An objection to direct marketing, including related profiling, is unconditional: that processing stops. Optional analytics controls and a profiling objection concern different purposes.

5. AI Processing And Profiling

NetQnect uses AI-assisted features to help users create profiles, understand connections, prepare follow-ups, search, match with relevant people or events and use the AI Assistant.

AI features may process profile data, relationship context, event data, Qnect activity, assistant messages, notes, tasks, feedback and service metadata. NetQnect may also create embeddings and scores used for search, matching, ranking or recommendation features.

AI outputs are suggestions. They should be reviewed by the user before relying on them or sharing them. NetQnect does not intend AI features to make legal, financial, medical, employment or other regulated professional decisions.

More detail is provided in the AI Processing Notice and AI Lawful Basis Summary.

6. Sharing Personal Data

We may share personal data with:

• hosting, database, authentication, storage and infrastructure providers;
• AI and embedding providers;
• analytics, crash reporting and performance providers, where enabled;
• payment processors and billing providers;
• email, support and communications providers;
• connected service providers, such as calendar and event platforms you authorise;
• professional advisers, insurers and auditors;
• law enforcement, regulators, courts or other authorities where required by law;
• other users, message recipients and organisation or team administrators, to the extent supported by the relevant feature and applicable Profile or sharing controls. Publicly shared Profile information may be seen or copied by its audience. Team administration does not grant access to all private account or assistant content.

For an active listed Event, registering with a public Profile makes the full public Profile you select and, where recorded, whether you are attending in person or virtually visible to every signed-in NetQnect Member through the attendee roster and attendee recommendations, including Members who have not registered for that Event. Appearance in either surface reveals that the Profile is registered. The Virtual roster filter uses only that coarse attendance mode, and the mode may be used to adjust attendee recommendations where attendance modes differ. Neither surface discloses a virtual join link, venue details, ticket class, provider evidence or how the mode was determined. There is no separate Event attendee-roster opt-out; choose a Profile you are comfortable sharing and, where the Event offers a choice, the attendance option you are comfortable sharing. The visibility settings of that Profile continue to control which Profile fields are public. If the Profile you select is not public, or you later make it non-public or cancel your registration, it is no longer shown to other Members in the roster or recommendations. This does not necessarily delete limited operational, cancellation or legal records retained by NetQnect.

Confirmed attendees and organisers may see a simple per-person checked-in indicator to support in-person networking. The underlying registration and check-in record, including check-in time, method, device, staff actor, notes, ticket, approval and named waitlist details, remains restricted to the organiser and the person concerned where applicable. Unrelated Members do not receive attendee identities for private, unlisted or inactive Events.

The Subprocessors list gives more detail about recipients and purposes. Messages to legal@netqnect.com pass through Porkbun forwarding to the owner's Microsoft Hotmail/Outlook.com consumer mailbox; Microsoft may process this correspondence outside the UK and EU.

7. International Transfers

NetQnect's policy is to host and process personal data using UK (London-region) and EU infrastructure and providers wherever possible, including for AI and embedding processing. The Subprocessors list records each provider's current processing region and any exception to this policy. Some providers may still process data outside the UK or European Economic Area, including providers that a user personally authorises through an optional connected service such as Google Calendar or Microsoft Calendar, which are processed under the user's own account with that provider. Where this happens, NetQnect will use appropriate safeguards required by applicable data protection law, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, EU Standard Contractual Clauses or equivalent safeguards.

You can request information about applicable transfer safeguards, including a copy where available with confidential details protected, at legal@netqnect.com. A user choosing a foreign connected provider does not remove NetQnect’s obligations for transfers it makes.

8. Retention

We keep personal data only for as long as needed for the purpose for which it was collected, including to provide the service, meet legal obligations, resolve disputes, maintain security and enforce agreements.

The Data Retention Schedule explains retention periods and deletion criteria. Recovery copies are kept for up to 60 days, access-restricted and excluded from ordinary use; deletion and restriction instructions are reapplied before any restored copy is used. Some technical backups, audit logs and legal records may be kept for a limited period after account deletion where legally required or needed for security, accounting or dispute purposes.

User-to-user app messages are treated separately from NetQnect's own support, transactional email or billing records. We do not retain all app message content merely because some business email, tax or accounting records may need separate legal retention.

9. User Rights

Depending on location and the processing involved, users may have rights to:

• access their personal data;
• receive a copy of their data;
• correct inaccurate data;
• delete personal data;
• restrict processing;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• ask for human review or contest certain automated decisions, where applicable;
• complain to a data protection regulator.

Requests can be sent to legal@netqnect.com.

Complaints about our use of personal data

Contact legal@netqnect.com to complain about how we handle your personal data. Explain the issue and the outcome you seek; do not send passwords or unnecessary sensitive documents. We acknowledge data-protection complaints within 30 days, investigate without undue delay, keep you informed and communicate the outcome. This complaint acknowledgement period does not replace the separate deadlines for access, deletion or other rights requests.

You can also complain to the Information Commissioner's Office. Where EU GDPR applies, you may complain to the supervisory authority in the EU country where you live, work or believe a breach occurred. We do not require you to waive that right.

10. Account and Data Deletion

NetQnect is operated by Just Try AI Ltd. You can request deletion of your NetQnect account and associated personal data even if you have uninstalled the app or cannot sign in.

Request account deletion without the app

Request account deletion by email

• Send the request to legal@netqnect.com, preferably from the email address associated with your NetQnect account.
• Say that you want to delete your NetQnect account and associated personal data. If you cannot access that email address, explain this so we can arrange appropriate identity verification.
• We will verify the request before deleting data to protect your account. Do not send passwords, sign-in codes, payment-card details or identity documents with the initial request.
• The email link opens a draft in your email app. Nothing is sent until you send it. If it does not open, copy legal@netqnect.com into your email app.

You do not need to reinstall NetQnect to use this route. Uninstalling the app or signing out does not delete your account.

Request deletion of selected data

Request selected-data deletion by email

Tell us which data you want removed and whether you want to keep your account. A request about analytics alone is not permission to delete your whole account. We will explain any information needed to identify and fulfil your request safely.

Delete from the app

If you can sign in, account deletion is also available from NetQnect's privacy settings. Review the confirmation and complete any requested reauthentication. Account deletion is different from deleting a single profile or disconnecting a calendar provider.

What happens to your data

Account deletion covers the account and associated personal data in NetQnect, including owned profile information, relevant messages and relationship data, uploaded account media, assistant data, and connected-service information, subject to the specific shared-record and lawful-retention qualifications below and in section 8.

Where a relationship reference remains after account deletion, your identity is shown as “Deleted user” rather than retained as named contact history.

Some shared records contain other people's information or records they are independently entitled to keep. We remove your personal data as applicable without treating another person's own records as yours. Disconnecting NetQnect does not delete your Google, Microsoft or Eventbrite account, your entire provider calendar, or all records held independently by those providers.

We may retain limited information for a justified legal, accounting, security or rights-handling purpose. Applicable company accounting records are kept for six years from the end of the relevant company financial year, or longer where an applicable obligation or documented hold requires it. Recovery copies are subject to their separate retention and restricted-use controls. We will explain applicable exceptions and provider handling when responding to your request.

For analytics requests, we follow our privacy rights process. Where effective anonymisation is appropriate and demonstrated, anonymous statistics may remain; where it cannot be demonstrated, personal data is deleted unless a lawful exception applies. This does not mean every existing aggregate is anonymous.

Timing and confirmation

We respond without undue delay and within the applicable legal deadline, normally one calendar month. If a lawful extension or exception applies, we explain it. We may need proportionate information to verify identity or understand the requested scope. We confirm the outcome and explain any retained information rather than treating acknowledgement as proof of deletion.

Read the Data Retention Schedule for further information.

11. US State Privacy Rights

If a US state privacy law applies to a user or household, the user may have additional rights to know, access, correct, delete, port, opt out of sale or sharing, opt out of targeted advertising, opt out of certain profiling, limit some sensitive personal information uses, appeal a denied request, or avoid discrimination for exercising privacy rights.

NetQnect does not sell personal data, share it for cross-context behavioural advertising, or use marketing pixels or targeted advertising in the current service.

Where a legally recognised browser opt-out preference signal, such as Global Privacy Control, is received on the website, NetQnect treats it as a request to keep optional analytics and marketing technologies off for that browser unless you change the applicable choice through an available lawful process.

US state privacy requests can be sent to legal@netqnect.com or submitted through the in-app privacy request route where available.

12. Consent Withdrawal

Where processing is based on consent, users can withdraw consent at any time. Withdrawal does not affect processing that happened before consent was withdrawn.

App privacy settings may control analytics, crash reporting, performance reporting and location-related features. Some settings may also be available in account, profile, integration or team controls.

Optional Google/Firebase Analytics collection stops when app analytics consent is withdrawn. NetQnect may still create or retain records needed to deliver requested features, administer billing, protect the service, prove consent or withdrawal, or measure stateful service outcomes where another lawful basis described in this Notice applies. These operational records are not sent to Google Analytics merely because they exist.

13. Optional Programmes And Pseudonymised Data

We do not use your data to train AI models. If we ever propose an optional programme, we will explain it in Privacy Settings and ask you first.

Replacing names or account identifiers with codes does not automatically make records anonymous. Coded records remain personal data where a person can reasonably be identified, including through relationships or context.

14. Children

NetQnect is not intended for children. Users must be at least 18 years old, or the age of legal majority in their jurisdiction, to use the service.

15. Changes

We may update this Privacy Notice from time to time. Material changes will be notified where required by law.