Privacy Policy — QRPulse

1. Introduction

QRPulse ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Account Data

When you register, we collect your name, email address, and encrypted password. This information is used to authenticate you and communicate service updates.

QR Scan Data

When someone scans a QR code you create, we collect:

Approximate geographic location (city, region, country — derived from IP address)
Device type, operating system, and browser
Referrer URL (if available)
Timestamp of the scan
IP address (used for deduplication and geo-resolution, not stored long-term)

We do not collect personally identifiable information about the people who scan your QR codes.

Payment Data

Payment processing is handled entirely by Razorpay. We do not store your card number or banking details. We receive a payment confirmation and subscription status from Razorpay.

Usage Analytics

We use PostHog to collect anonymized product usage analytics (page views, feature interactions) to help us improve the Service. This data is not linked to your identity unless you are a registered and signed-in user.

3. How We Use Your Information

To provide and operate the Service
To display analytics in your dashboard
To process payments and manage subscriptions
To send transactional emails (account confirmation, billing receipts)
To improve the product through anonymized analytics
To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Retention

We retain your account data for as long as your account is active. Scan analytics data is retained indefinitely to power your historical dashboard views. If you delete your account, your data is removed within 30 days.

5. Third-Party Services

We use the following third-party services:

Razorpay — Payment processing
PostHog — Product analytics
ip-api.com — IP geolocation (used transiently during QR scans)
Vercel — Hosting and infrastructure

Each third party has its own privacy policy. We recommend reviewing them if you have concerns.

6. Cookies

We use a single authentication cookie to keep you signed in. We do not use advertising or tracking cookies. PostHog may set a cookie to identify anonymous sessions for analytics purposes.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your scan analytics data (Pro plan: CSV export)

To exercise any of these rights, email us at support@qrpulse.co.

8. Security

We use industry-standard security measures including HTTPS, encrypted password storage, and signed authentication tokens. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email before significant changes take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us at support@qrpulse.co.