Legal Documents Changelog

This file tracks all changes to QRoss legal documents for compliance and transparency.

Version 1.0 - January 1, 2025

Initial Release

Documents Created

• Platform Terms of Service (v1.0)
• Platform Privacy Policy (v1.0)
• Event Attendee Terms of Service (v1.0)
• Event Attendee Privacy Policy (v1.0)

Key Provisions

Platform Terms of Service

• Alpha software disclaimers
• User responsibilities for event configuration
• Liability limitations for third-party providers
• Turnstile disable warnings
• Zero-knowledge bearer token storage
• Service provider change rights
• No refunds policy (future)
• Account termination procedures

Platform Privacy Policy

• Data collection practices (metadata, technical data)
• Third-party service providers (Cloudflare, Supabase, Storj)
• International data transfers
• 30-day deletion policy (90-day backup retention)
• Support staff access logging
• Hong Kong PDPO, GDPR, CCPA compliance
• Zero-knowledge encryption for bearer tokens
• Security measures and limitations

Event Attendee Terms

• Event organizer as data controller
• Automatic data collection disclosure
• Bot protection (Turnstile) opt-out by organizers
• User data rights procedures
• Limitation of liability for organizer actions
• Alpha software warnings

Event Attendee Privacy Policy

• Dual data controller model (organizer + QRoss)
• Technical data collection transparency
• Geolocation and device fingerprinting
• Service provider data sharing
• International transfer disclosures
• Hong Kong PCPD complaint procedures
• 30/90-day retention policy
• CCPA "Do Not Sell" confirmation

Compliance Standards

• Hong Kong Personal Data (Privacy) Ordinance (PDPO)
• GDPR best practices (EU residents)
• California Consumer Privacy Act (CCPA)

Contact Information

• Support: [email protected]
• Privacy: [email protected]
• Entity: QRoss Limited, Hong Kong SAR

Future Change Template

Use this template for all future updates:

## Version X.X - [Date]

**Type:** [Minor Update | Major Update | Emergency Fix]

### Changes Made

#### [Document Name]
- [Specific change 1]
- [Specific change 2]

### Reason for Change
[Brief explanation: new feature, legal requirement, clarification, etc.]

### User Impact
[Low | Medium | High]
[Explain how this affects users]

### Notice Period
[Immediate | 14 days | 30 days]

### Effective Date
[Date when changes take effect]

Change History

Notes

When to Update This Log

• Every time any legal document changes
• Even minor clarifications must be logged
• Update BEFORE publishing changes to users

Version Numbering

• Major (X.0): Significant changes requiring user notification
• Minor (1.X): Clarifications, typos, non-material changes
• Patch (1.0.X): Emergency fixes, contact info updates

Material vs. Non-Material Changes

Material Changes (require 14-day notice):

• New data collection practices
• Changes to data retention periods
• New third-party service providers
• Changes to user rights procedures
• Increased liability limitations
• Changes to governing law or jurisdiction

Non-Material Changes (immediate):

• Typo fixes
• Clarifications with no substantive change
• Contact information updates
• Formatting improvements
• Adding examples to existing provisions

Legal Review Checklist

Before publishing any change:

• Document updated with new version number and date
• CHANGELOG.md updated with change details
• Material changes flagged for 14-day notice
• User notification prepared (if required)
• Homepage and footer links updated (if new docs)
• Previous version archived (if major change)

Maintained by: QRoss Legal Team
Last Updated: January 1, 2025
Next Review: July 1, 2025 (or as needed)