<?xml version="1.0" encoding="UTF-8"?>
<!--
  sitemap.xml — QuestDeskIT
  Scope: public-facing URLs only.
  Authenticated application routes (/dashboard, /quests, /clients, etc.)
  are excluded — they require a session and must not be indexed.
  Update lastmod whenever the corresponding page content changes.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- Root / landing page -->
  <url>
    <loc>https://app.questdeskit.com/</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>

  <!-- Staff login -->
  <url>
    <loc>https://app.questdeskit.com/login</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- Client portal entry point -->
  <url>
    <loc>https://app.questdeskit.com/portal</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>

  <!-- Legal pages -->
  <url>
    <loc>https://app.questdeskit.com/privacy</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://app.questdeskit.com/terms</loc>
    <lastmod>2026-08-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>

</urlset>
