Privacy Policy

When a customer or visitor scans one of your QR codes, we prioritize their digital privacy:

3. Information We Collect from Account Holders

When you create a QRHQ Studio account, we collect:

• Contact Information: Name, email address, and billing country.
• Uploaded Assets: Brand logos, menu PDF documents, and vCard contact details you choose to store for hosting.
• Payment Data: Payment details are securely processed by our PCI-DSS compliant billing gateways (e.g. Stripe / Razorpay). We never see or store your full credit card number.

4. How We Use Your Information

We use your information exclusively to:

• Provide, maintain, and optimize the QRHQ dynamic vector studio and edge redirection engine.
• Provide you with aggregate scan telemetry (device type, operating system, and geographic regions).
• Send transactional receipts, critical security notices, and password resets.
• Prevent abuse, fraud, phishing campaigns, and malware distribution.

5. Zero Selling of Personal Data

We have never sold, rented, or monetized personal information or scan telemetry to data brokers, ad networks, or third parties, and we never will.

6. GDPR & CCPA Compliance

If you are located in the European Economic Area (EEA), the United Kingdom, or California, you hold rights under applicable privacy laws, including:

• The right to access, export, or correct your personal data.
• The right to request immediate deletion of your account and hosted media.
• The right to restrict or object to certain processing operations.

To exercise any of these rights, contact our Data Protection Officer at [email protected].

7. Security Standards & Data Retention

We employ TLS 1.3 encryption in transit, PBKDF2-SHA-256 for password-gated destination links, and AES-256 encryption at rest on all AWS and Cloudflare storage infrastructure. Data is retained for as long as your account is active, and permanently purged upon account closure.