Privacy Policy

We do not store the network address of anyone who scans your QR codes. We store a one-way cryptographic hash of it, salted with a secret only we hold. That lets us tell you how many different people scanned a code without us — or anyone who obtained our database — being able to work out who they were.

We also do not sell data, and we do not run advertising trackers on our own site.

Two different groups of people, with different data:

• You, our customer — the details you give us to buy and run an account
• People who scan your codes — members of the public who never signed up to anything

For the second group, you are the one deciding what a code does; we process that data on your behalf.

• Account and billing details: your name or company name, email, phone, billing address and GST number where given
• Sign-in details: your email and a hashed password — we never store a password we could read
• What you create: your QR codes, their destinations, your team members' details, and files you upload
• Support correspondence: emails and messages you send us

We collect this because we need it to provide the service and to raise a valid tax invoice. Payment card details are handled entirely by Razorpay — they never reach our servers.

For each scan we record:

• The date and time
• A salted, one-way hash of the network address — never the address itself
• An approximate location (country, region, city) derived at the moment of the scan
• The device type, operating system and browser
• The website that referred them, where there is one

Approximate location is derived from the network address and then that address is discarded. It is often unavailable on mobile networks, and it is never precise — it tells you a city, not a street.

If you use digital business cards, the details you enter for each team member — name, job title, phone, email, photo — appear on a publicly reachable page, because that is the purpose of the card. Anyone with the link or the printed code can see them.

Please make sure your team members know this before you add them. You can archive someone at any time, which immediately stops their card from working.

Team cards can carry a short form so a customer can send their details back. Those submissions belong to you and appear only in your account. We do not use them for anything. You can turn the form off entirely in Settings.

We use cookies for two things, both necessary:

• Keeping you signed in to your account
• Remembering that you have entered the password for a password-protected code, for a short period

We do not use advertising or analytics cookies on our own website, so there is no cookie banner to dismiss.

Only where it is needed to run the service:

• Razorpay, to take payment — they receive your billing details, we receive no card data
• Our email provider, to deliver account and order emails
• Our hosting provider, which stores the database and uploaded files
• Anyone we are legally required to disclose to

We do not sell personal data, and we do not share it for anyone else’s marketing.

Account data is kept while your account exists and for a reasonable period afterwards, so a lapsed subscription can be revived without you losing anything. Invoices and payment records are kept as long as Indian tax law requires.

Ask us to delete your data and we will, subject to those record-keeping obligations.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to info@qrscanngo.com and we will respond within 30 days.

You can export your scan data and your enquiries yourself, as CSV, from inside your account, at any time.

Passwords are hashed with argon2id. Each customer’s data is isolated from every other’s at the database query level. Uploaded files are validated by their actual content rather than their claimed type, and images are re-encoded on upload, which strips any embedded location data a photograph may have carried.

No system is perfectly secure. If we ever become aware of a breach affecting your data we will tell you promptly and tell you what we know.

GigaWebZone LLP, Pune, Maharashtra - 410504, India.
Email info@qrscanngo.com · Phone +91 810 8400 599