Privacy Policy

1. Introduction

QRscode ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code generation and management platform at qrscode.com ("Service").

By using our Service, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us:

• Account Information: Email address when you create an account
• Authentication Data: Login credentials and OAuth tokens from third-party providers (Google)
• Payment Information: Billing details processed through Stripe (we do not store credit card numbers)
• Communication Data: Messages you send to our support team

2.2 QR Code and Usage Data

• QR Code Content: URLs, text, and other data you encode in QR codes
• QR Code Metadata: Creation dates, expiration dates, custom names/descriptions
• Analytics Data: Scan counts, timestamps, and usage statistics

2.3 Automatically Collected Information

• Usage Analytics: How you interact with our Service, features used, time spent
• Device Information: Browser type, operating system, device type
• Log Data: IP addresses, access times, error logs
• Location Data: Approximate geographic location based on IP address (country/region level)
• Cookies: See Section 7 for detailed cookie information

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Create and manage your user account
• Generate and store your QR codes
• Provide analytics and reporting features
• Process payments and manage subscriptions
• Deliver customer support

3.2 Service Improvement

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Monitor and prevent security threats
• Troubleshoot technical issues

3.3 Communication

• Send important service updates and notifications
• Respond to your inquiries and support requests
• Notify you of changes to our terms or privacy policy

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

We use trusted third-party services that may have access to your information:

• Supabase: Database hosting and user authentication
• Stripe: Payment processing and subscription management
• Vercel: Web hosting and content delivery
• Zoho: Email services and customer communication
• Google: OAuth authentication services

4.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our Terms of Service
• Prevent fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified of any such change.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication requirements
• Regular Security Audits: Ongoing monitoring and security assessments
• Secure Infrastructure: Hosting with reputable, security-focused providers
• Employee Training: Staff trained on data protection best practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Retained while your account is active
• QR Code Data: Retained according to your plan limits and expiration settings
• Analytics Data: Aggregated data may be retained longer for service improvement
• Payment Data: Retained according to legal requirements and Stripe's policies
• Log Data: Typically retained for 90 days for security and troubleshooting

When you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

7. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience:

7.1 Types of Cookies

• Essential Cookies: Required for basic site functionality and security
• Authentication Cookies: Keep you logged in during your session
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our Service

7.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 General Rights

• Access: Request information about the data we have about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain types of data processing

8.2 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to restriction of processing
• Right to lodge a complaint with a supervisory authority

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at support@qrscode.com. We will respond to your request within 30 days.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

Our third-party service providers may be located in various countries, including the United States. We work with providers that maintain appropriate data protection standards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Sending email notifications to registered users
• Updating the "Effective Date" at the top of this page

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@qrscode.com
• Website: qrscode.com
• Subject Line: "Privacy Policy Inquiry"

We are committed to resolving any privacy-related concerns you may have and will respond to your inquiry as promptly as possible.