Privacy Policy

1. Introduction

Welcome to Qrafted ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code generation service.

By using Qrafted, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email address)
• Subscribe to a paid plan (billing information processed by Stripe)
• Contact us for support (any information you provide)
• Create QR codes (content you choose to encode)

2.2 Automatically Collected Information

When you access our service, we automatically collect certain information:

• Device information (browser type, operating system)
• IP address and approximate location
• Usage data (pages visited, features used)
• QR code scan analytics (for tracking-enabled QR codes)

2.3 QR Code Scan Data

When someone scans a dynamic QR code created on our platform, we collect:

• Time and date of scan
• Approximate geographic location (country, city)
• Device type and browser
• Referrer information (if available)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages and updates
• Respond to your comments, questions, and support requests
• Provide QR code analytics to our users
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Supabase (database and authentication)
• Stripe (payment processing)
• Vercel (hosting and deployment)
• Resend (email delivery)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure payment processing through Stripe (PCI-DSS compliant)

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. QR code scan analytics are retained for the lifetime of the QR code or until you delete it.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Export: Request a portable copy of your data
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at privacy@qrafted.com.

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and remember your preferences
• Analyze how our service is used
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.

9. Children's Privacy

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.