Privacy Policy

This Privacy Policy explains how QRLike, operated by [Company Legal Name] ("we", "us"), collects, uses, and protects your information when you use our service (the "Service").

1. Information we collect

• Account & workspace data — name, email, username, and workspace details you provide.
• QR content — the data you encode (URLs, WiFi, contact, bank, event details, etc.) and any logos you upload.
• Scan analytics — when someone scans a dynamic QR or opens a hosted information page, we log the time, approximate location (country/city derived from IP address), device type, operating system, browser, referrer, and IP address.
• Billing data — handled by our payment provider Paddle; we store only a subscription/customer identifier and plan status, never your card details.
• Cookies — essential cookies to keep you signed in and, if enabled, analytics cookies.

2. How we use information

To provide and operate the Service, generate QR codes and analytics, process subscriptions, communicate with you, prevent abuse, and comply with legal obligations.

3. Legal bases (GDPR)

Where the GDPR applies, we process data based on: performance of our contract with you, our legitimate interests (security and analytics), your consent (non-essential cookies), and legal obligations.

4. Sharing

We do not sell your personal data. We share it only with service providers that help us run QRLike, including: Paddle.com (payments, as Merchant of Record), our hosting and infrastructure providers, and IP-geolocation services. These providers process data on our behalf under appropriate safeguards.

5. Data retention

We keep account and QR data while your workspace is active. Trial QR codes that are not upgraded are removed after the 5-day grace period. You can delete QR codes at any time. Scan logs are retained to provide analytics and may be aggregated or removed periodically.

6. International transfers

Your data may be processed in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, object to or restrict processing, and withdraw consent. To exercise these rights, contact us. If you are in the EU/EEA or UK, you may also lodge a complaint with your local data protection authority.

8. Security

We use reasonable technical and organisational measures to protect your data, including access controls and encryption in transit. No method of transmission or storage is 100% secure.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes & contact

We may update this Policy and will post changes here with a new "Last updated" date. For any privacy question or request, contact us at privacy@qrlike.com.