Privacy Policy
Last updated: August 2026
This Policy describes how QRtowork processes the personal data of account holders and of people who scan QR codes generated on the platform.
1. Data we process
- Account data: email and credentials (passwords are stored with strong hashing, never in plain text).
- Scan data: scan events with approximate geolocation and device data, for analytics.
- Billing data: what is needed to manage paid plans.
2. IP protection (scans)
We do not store the raw IP address of anyone who scans. The IP is transformed with a keyed hash before any persistence or queuing, so analytics never retain the original identifiable IP.
3. Purpose and legal basis
We process data to provide the Service, offer analytics to the account holder, manage billing, and comply with legal obligations. We do not sell personal data to third parties.
4. Retention
We retain data while the account is active. After a deletion request, a grace period applies and then a legal retention period before the associated records are permanently deleted.
5. Your rights
You may access, rectify, and request deletion of your data, and export your account information (portability) from the platform settings or through the contact channels.
6. Third parties
We use providers for transactional email, anti-abuse protection, and error telemetry. These providers process data on our behalf and under appropriate safeguards.
7. Contact
To exercise your rights or for privacy questions, email us at qrtoworkdn@gmail.com.