Legal

Privacy Policy

Last updated September 2026

1. Who we are

QRProfits provides QR codes, scan analytics, and payment tools to businesses ("you"). This policy explains what we collect when you use the Service and when someone scans one of your codes.

2. What we collect

• Account data — your name, email, organization, and plan. The email is your sign-in identity.
• Scan data — when a code is scanned we record the event, coarse device/OS/browser type, and referrer. We truncate IP addresses before using them for de-duplication and do not store full IP addresses.
• Contacts and leads you collect — if you use lead forms, the contact details your customers submit are stored on your behalf; you are the controller of that data.
• Payment data — when you collect payments or pay for a plan, card and bank details are handled by our third-party payment provider. We do not store full card numbers.

3. How we use data

We use data to operate the Service: serve redirects, produce your analytics and ROI reporting, process billing and payments, prevent abuse and fraud, and send essential and (where you consent) marketing messages.

4. How we share data

We share data only with service providers that help us run the Service (for example, hosting, our email provider, and our payment provider), under contracts that limit their use of it. We do not sell personal data. We may disclose data where required by law.

5. Cookies

We use a small number of cookies that are essential to running the Service and to attributing scans to conversions. See our Cookie Policy for details. We do not use third-party advertising cookies.

6. Retention

We keep account and analytics data for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, accounting, and dispute-resolution needs.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can export your account data and close your account yourself from your account settings at any time; closing an account anonymizes your billing details while we retain the legally required invoice records. For anything else — or to exercise a right we don’t yet offer self-serve — contact us and we will action your request.

8. Security

We use technical and organizational measures to protect data, including IP truncation, encrypted transport, and access controls. No system is perfectly secure, but we work to protect your information.

9. International and children

We may process data in countries other than yours. The Service is not directed to children, and we do not knowingly collect data from them.

10. Changes and contact

We may update this policy; material changes will be posted here. Questions or requests? Contact us.