Privacy Policy

Last updated: February 24, 2025

1. Who We Are

QRplex (“we”, “us”, “our”) operates the website qrplex.app and the QRplex platform. We provide QR code generation, management, and analytics services. Our contact email is help@qrplex.app.

2. Information We Collect

We collect information you provide directly, and information collected automatically:

  • Email address — when you join our waitlist or create an account.
  • QR code content — URLs, text, or other data you encode in QR codes you create.
  • Scan data — when someone scans one of your QR codes, we record the timestamp, approximate geographic region (country/city), device type, and operating system. We do not collect personally identifiable information about the people scanning your codes.
  • Form submissions — data submitted through QR-linked forms you create on the platform.
  • Usage data — pages visited, features used, and session duration, collected via analytics tools.
  • Technical data — IP address, browser type, and referrer, collected automatically.

3. How We Use Your Information

  • To provide, operate, and improve the QRplex platform.
  • To send product updates, launch announcements, and early access notifications (you can unsubscribe at any time).
  • To provide analytics and insights to QR code owners about their campaigns.
  • To detect fraud, abuse, and ensure platform security.
  • To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your data is:

  • Contract performance — to provide the services you signed up for.
  • Legitimate interests — for analytics, security, and product improvement.
  • Consent — for marketing emails. You may withdraw consent at any time.

5. Data Sharing

We do not sell your personal data. We share it only with:

  • Supabase — database and authentication infrastructure (GDPR-compliant, US/EU).
  • Resend — transactional email service for confirmations and notifications.
  • Vercel — hosting and edge infrastructure.
  • Cloudflare — DNS, CDN, and performance services.
  • Google Analytics — anonymized usage analytics.
  • Law enforcement, when required by valid legal process.

6. Data Retention

We retain your account data for as long as your account is active, plus 30 days after deletion. Scan analytics data is retained for 24 months. Email addresses collected for the waitlist are retained until you unsubscribe.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (“right to be forgotten”).
  • Object to or restrict processing of your data.
  • Request a portable copy of your data.
  • Withdraw consent at any time (for consent-based processing).

To exercise any of these rights, email help@qrplex.app. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication and session management, and analytics cookies (Google Analytics) to understand usage patterns. Analytics cookies are only set with your implied consent through continued use of the site. You can disable analytics cookies via your browser settings or a browser extension.

9. Children's Privacy

QRplex is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at help@qrplex.app.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for significant changes, notify you by email.

11. Contact

Questions about this policy? Email us at help@qrplex.app.