This Privacy Policy describes how Smarter QR Code ("we," "us," "our") collects, uses, and shares information in connection with Smarter QR Code (the "Service").

1. Information We Collect

Account Information

When you sign up, our authentication provider stores your name, email, and a secure credential (password hash or federated identity). We keep a copy of your name and email in our database, linked to your QR codes, rules and billing, along with account status such as your plan and any limits we set.

Billing Information

Payments are handled by our payment provider. We do not store your card number or full payment details on our servers. We store what we need to manage your subscription: the customer ID, subscription ID and status, renewal date, and any scheduled cancellation date. We share your name and email with the payment processor when you subscribe.

QR Code and Rule Data

We store the QR codes you create, their destination URLs, routing rules, styling settings, and your brand settings (hold page text, colors, font, logo and scan behavior), including any logo image you upload. Your logo, hold page and destination URLs are shown publicly to anyone who scans your codes. When you replace or remove an uploaded logo, the image is deleted from storage right away.

Scan Data

QR codes open links on our scan domain, smqrcode.com, which is part of the Service and covered by this policy. When someone scans one of your QR codes, we log the scan timestamp, the rule that matched (if any), and the operating system and browser (for example, "iOS" and "Safari"), which we work out from what the visitor's browser reports. We don't store the browser's full identification string. We log scans on every plan: free accounts see a total count, and paid accounts see the full statistics. If a rule uses location, we may briefly use approximate location derived from the scanner's IP address or GPS (if granted) to evaluate the rule. Rules can also use the scanner's browser language and the time of the scan. None of these are stored, and we do not associate scan logs with identified individuals.

Technical Data

Our servers receive standard request data including IP address and browser identification. We use it to operate and secure the Service. We don't store IP addresses or full browser identification strings in our database; our hosting provider's request logs may keep them for a few days for troubleshooting and security.

Reports About QR Codes

Anyone can report a QR code they think is a scam or otherwise abusive, from the page they see after scanning it or from our website. We store the report: which code it's about, the reason chosen, any details written, and an email address if one is given, so we can ask follow-up questions. We use reports only to review the code and act on it.

2. How We Use Information

• Provide, maintain, and improve the Service.
• Evaluate routing rules and deliver redirects.
• Process payments and manage subscriptions.
• Communicate with you about your account, billing, and important service updates.
• Detect, investigate, and prevent abuse, fraud, or security incidents.
• Comply with legal obligations.

3. Sharing Information

We share information only with the service providers needed to run the Service:

• Authentication provider: manages account identity and login. Its script loads on our website and app, but not on the page people see after scanning a code.
• Payment processor: handles subscription billing and payment methods.
• Hosting and edge infrastructure: runs our application and database, and the check on the report page that tells people from bots.
• Analytics: our hosting provider's analytics counts page views on our site, including the page people see after scanning a code, to measure traffic and performance. It doesn't use cookies or build profiles of visitors.
• Map provider: renders the map used to set up location rules and looks up addresses you search for.

We may disclose information if required by law, to enforce our Terms, or to protect rights, property, or safety. If we're ever involved in a merger, acquisition, or asset sale, we'll notify you before your information is transferred.

If you use your camera to scan a printed code from the dashboard, the image is processed on your device and never uploaded.

We don't sell your personal information.

4. Cookies and Local Storage

We use cookies and similar technologies for authentication, security, and preferences (such as your color mode and language). Our analytics doesn't use cookies, and we do not use third-party advertising cookies.

5. Data Retention

We keep account and billing records for as long as your account is active and for a reasonable period afterward to comply with legal obligations. Individual scan records are kept for about 14 days, then folded into daily per-code summary counts (by hour, operating system, browser and matching rule) and deleted. On free accounts, scans aren't stored individually at all: each one is only added to those daily counts. Daily summaries are kept for about 13 months, then folded into all-time per-code totals. When you delete a QR code or rule, we stop serving it but keep the record; ask us and we'll erase it. Reports about a code are kept with the code and erased with it. When an account is closed, we delete its codes, brand, logo and account record on request, and keep billing records as the law requires.

6. Security

We use industry-standard measures to protect your information, including encryption in transit. No system is perfectly secure; we can't guarantee absolute security.

7. Children's Privacy

Accounts are for adults (18 or older). We do not knowingly collect personal information from children under 13 (or the minimum age under local law). If you believe a child has provided us information, contact us and we'll delete it.

8. International Transfers

We operate on global edge infrastructure. Your information may be processed in countries other than your own. Where required, we rely on appropriate legal mechanisms for international transfers.

9. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can edit your codes, rules and brand from the dashboard; deleting a code or rule there hides it but doesn't erase it. To erase your data, close your account, or make any other request, email support@smarterqrcode.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If the changes are material, we'll notify you by email or an in-app notice. The effective date at the top of this page shows when the policy was last updated.

11. Contact

Questions or requests? Email support@smarterqrcode.com.