Política de privacidad

1

Introduction

QRCode.ing (“Company”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the “Service”).

By using our Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not access or use the Service.

This Privacy Policy applies to all users of our Service, including visitors, registered users, and paying subscribers. It describes your privacy rights and how you are protected by data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2

Information We Collect

We collect information that you provide directly to us, information we collect automatically, and information from third-party sources.

Information You Provide

Account Information: Name, email address, password (encrypted), profile picture, and authentication details when you create an account.
Billing Information: Payment method details, billing address, and transaction history. Note: Full payment card details are processed by our third-party payment processors and are not stored on our servers.
Content Data: QR code destinations, linkpage content, uploaded images and files, labels, and any other content you create through the Service.
Communications: Messages you send to our support team, feedback, survey responses, and any other communications with us.
Team Information: Team names, member email addresses, and role assignments for team workspace features.

Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the Service, click patterns, and interaction data.
Device Information: Device type, operating system, browser type, screen resolution, and device identifiers.
Location Data: Approximate geographic location derived from IP address (country, region, city).
QR Scan Analytics: When QR codes are scanned, we collect scan time, geographic location (approximate), device type, browser, operating system, and referring URL. This data is used to provide analytics features to QR code creators.
Linkpage Analytics: Page views, link clicks, visitor counts, referral sources, and UTM parameters for linkpages.
Log Data: IP addresses, access times, pages viewed, and error logs for security and troubleshooting purposes.

Information from Third Parties

Authentication Providers: If you sign in using a third-party service (e.g., Google, GitHub), we receive your name, email, and profile picture from that service.
Payment Processors: Transaction status and partial payment details from our payment processing partners.
Analytics Partners: Aggregated usage data and performance metrics.

3

How We Use Your Information

We use the information we collect for the following purposes:

Providing and Improving the Service

To create and manage your account
To process transactions and send billing notifications
To generate, host, and track your QR codes and linkpages
To provide analytics and reporting features
To improve and optimize the Service based on usage patterns
To develop new features and functionality

Communication

To send service-related announcements and updates
To respond to your inquiries and support requests
To send promotional communications (with your consent)
To notify you about changes to our policies or terms

Security and Compliance

To detect, prevent, and address fraud and abuse
To enforce our Terms of Service and other policies
To comply with legal obligations and respond to legal requests
To protect the rights, property, and safety of our users and the public

4

Legal Basis for Processing

Under the GDPR and similar data protection laws, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to fulfill our contractual obligations to you, including providing the Service and managing your account.
Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your rights.
Consent: Where you have given explicit consent for specific processing activities, such as marketing communications or optional analytics.
Legal Obligation: Processing necessary to comply with applicable laws and regulations.

5

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, including:

Cloud Infrastructure: Hosting, storage, and content delivery services
Payment Processing: Secure payment transaction handling
Analytics: Usage analysis and performance monitoring
Customer Support: Help desk and communication tools
Email Services: Transactional and marketing email delivery

These providers are contractually obligated to use your information only for the purposes we specify and in accordance with this Privacy Policy.

Legal and Safety Disclosures

We may disclose your information if required to:

Comply with applicable laws, regulations, or legal processes
Respond to lawful requests from public authorities
Protect the rights, privacy, safety, or property of QRCode.ing, our users, or the public
Detect, prevent, or address fraud, security, or technical issues

Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

With Your Consent

We may share your information for any other purpose with your explicit consent.

6

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

Account Data: Retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations and resolve disputes.
Content Data: QR codes, linkpages, and associated content are retained until you delete them or terminate your account.
Analytics Data: Scan and view data is retained according to your subscription plan (7 days for Free, 30 days for Creator, 90 days for Pro, 730 days for Business).
Billing Records: Retained for up to 7 years to comply with tax and accounting requirements.
Log Data: Generally retained for up to 90 days for security and troubleshooting purposes.

After account termination, we may retain certain information in anonymized or aggregated form for analytical purposes.

7

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption: Data in transit is protected using TLS/SSL encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
Access Controls: Strict access controls limit who can access personal data based on business need.
Authentication: Support for multi-factor authentication (MFA) to secure your account.
Infrastructure Security: Our infrastructure is hosted on secure, SOC 2 compliant platforms with regular security audits.
Monitoring: Continuous monitoring for security threats and unauthorized access attempts.

While we take reasonable precautions to protect your data, no security system is impenetrable. We cannot guarantee the absolute security of your information transmitted through the Service.

8

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer data internationally, we implement appropriate safeguards, including:

Standard Contractual Clauses approved by the European Commission
Transfers to countries with adequate data protection laws as determined by relevant authorities
Binding corporate rules where applicable

By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

9

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to certain exceptions.
Right to Restrict Processing: Request limitation of how we process your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at contact@qrcode.ing. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out of Sale

We do not sell personal information as defined by the CCPA. Therefore, we do not offer an opt-out of the sale of personal information.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a different level of service based on your exercise of privacy rights.

Authorized Agents

You may designate an authorized agent to make requests on your behalf. We may require verification of your identity and the agent's authorization before processing the request.

To exercise your CCPA rights, contact us at contact@qrcode.ing.

11

Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible.

12

Third-Party Links

The Service may contain links to third-party websites, applications, or services that are not operated by us. When you click on third-party links, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. This includes QR code destinations created by our users that link to external websites.

13

Cookies & Tracking

We use cookies and similar tracking technologies to collect and store information about your use of the Service. For detailed information about the cookies we use and your choices regarding cookies, please refer to our Cookie Policy.

Key points about our cookie usage:

Essential Cookies: Required for authentication, security, and basic functionality
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how you use the Service to improve it

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.

14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons.

When we make material changes, we will:

Update the “Last Updated” date at the top of this policy
Notify you by email (for registered users) or through a prominent notice on the Service
Where required by law, obtain your consent before implementing material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@qrcode.ing.

For privacy-related requests, we aim to respond within 30 days.