Privacy Policy

1. Information We Collect

Information you provide

• Your name and email address when you register
• Your business name if you choose to provide it
• A password (stored securely — we never store passwords in plain text)
• Payment information when you upgrade to a paid plan (your payment details are handled entirely by our payment processor — we never see or store your card number)

Information collected automatically when your QR codes are scanned

• The device type, browser, and operating system of the person scanning
• The approximate geographic location (country, region, city) derived from the scanner's IP address
• The referrer URL (the page or app the scanner came from, if available)
• UTM parameters if present in the scan URL
• The date and time of the scan

This scan data belongs to you as the QR code owner. It is visible only to you in your QRCampaign dashboard.

Information collected when you use our service

• Log data including your IP address, browser type, and pages visited
• Cookies and session tokens used to keep you logged in

If you sign in with Google

We receive your name, email address, and profile picture from Google. We do not receive your Google password or access to your Google account beyond what is needed to identify you.

2. How We Use Your Information

• To create and maintain your account
• To provide QR code creation, management, and analytics features
• To process your subscription payments
• To send you transactional emails (account confirmation, password reset, payment receipts)
• To detect and prevent abuse, fraud, and unauthorised access
• To improve and operate our service

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 3.

3. Third Parties We Work With

We work with carefully selected third-party service providers to operate QRCampaign. Each provider receives only the minimum data necessary to perform their function.

• Payment processing: Your subscription payments are handled by a third-party payment processor. We share your email address with them to create your billing account. We do not share your password or personal data beyond what is needed to process your payment.
• Email delivery: We use a third-party email delivery service to send you transactional emails. We share your email address and name with this provider solely for the purpose of delivering emails you have requested or that are necessary for your account.
• Geolocation: When your QR codes are scanned, we use a third-party geolocation service to convert the scanner's IP address into an approximate country, region, and city. The scanner's IP address is sent to this service and is not stored by QRCampaign after geolocation is complete.
• Infrastructure and hosting: Our service runs on third-party cloud infrastructure. Your data is stored on encrypted servers. We select infrastructure providers that meet industry-standard security requirements.
• Sign-in with Google: If you choose to sign in using Google, your authentication is handled by Google. Google's privacy policy governs how Google handles your data during sign-in.

4. Data Retention

• Your account data is retained for as long as your account is active
• If you delete your account, your data is permanently deleted within 30 days
• QR code scan data is retained for as long as your account is active. If you downgrade from a paid plan, your scan history is retained for a minimum of 12 months before any deletion
• We may retain anonymised, aggregated data (such as total platform scan volumes) indefinitely for internal analytics

5. Your Rights

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your scan data (available via CSV export in your dashboard)
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@useqrcampaign.com. We will respond within 30 days.

6. Cookies

QRCampaign uses cookies solely to keep you logged in and to maintain your session. We do not use advertising cookies or tracking cookies. We do not use third-party analytics cookies on this website.

7. Security

We take reasonable technical and organisational measures to protect your data. These include encrypted data storage, secure HTTPS connections, hashed password storage, and rate limiting on authentication endpoints. No method of transmission over the internet is 100% secure — if you believe your account has been compromised, contact us immediately at hello@useqrcampaign.com.

8. Children

QRCampaign is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us at hello@useqrcampaign.com and we will delete the account.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice in your dashboard. The date at the top of this page shows when the policy was last updated.

10. Contact

If you have any questions about this privacy policy or how we handle your data, contact us at hello@useqrcampaign.com.