Privacy Policy

1. Introduction

QR Punk is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code management service.

We collect and process data from two distinct groups:

• Account Owners: Users who create accounts and manage QR codes on our platform
• End Users: Individuals who scan QR codes created through our service

2. What Data We Gather

Data Minimization Approach

QR Punk is designed with privacy as a core principle. We do not store your personal information such as email addresses or names in our database. Authentication and identity management is handled by Clerk, our trusted authentication provider.

What we store in our database:

• A unique account identifier that links to your Clerk account
• QR codes you create (destination URLs, labels, settings)
• Usage analytics (scan counts, timestamps, user agents)
• Responses from qualification forms (business type, usage estimates)

What Clerk stores on our behalf:

• Your email address and name
• Authentication credentials and session management
• Account security information

This architecture means we hold minimal personal data, reducing both our responsibility and your risk in the unlikely event of a data breach. Your email and personal details are managed by Clerk's enterprise-grade security infrastructure.

End Users (QR Code Scanners)

When someone scans a QR code created through our service, we collect minimal data for analytics:

• Technical Data: User agent string (browser and device type), truncated IP address for general location data
• Scan Data: Timestamp of scan, which QR code was scanned
• Location Data: If the QR code is configured to request location, GPS coordinates (only with explicit user permission)

We do not create persistent profiles of end users or track them across multiple QR codes or websites.

3. How We Use This Data

We use the collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain our QR code management platform
• Analytics: To provide account owners with scan statistics and usage insights
• Customer Support: To respond to your inquiries and provide assistance
• Product Improvement: To understand how our service is used and identify areas for enhancement
• Communication: To send you service-related updates, billing notifications, and important announcements
• Security: To detect, prevent, and address technical issues and abuse
• Legal Compliance: To comply with applicable laws and regulations

4. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience and collect usage data.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and provide functionality.

How We Use Cookies

• Authentication: To keep you logged in and secure your session
• Preferences: To remember your settings and choices
• Analytics: To understand how visitors use our service and identify areas for improvement
• Security: To detect and prevent fraudulent activity

Controlling Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of our service.

5. Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication provided by industry-leading identity providers
• Regular security assessments and updates
• Access controls and monitoring
• Secure payment processing through PCI-compliant providers

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Third-Party Services

We use carefully selected third-party service providers to help us operate our platform. These providers have access to your personal data only to perform specific tasks on our behalf and are obligated to protect it:

• Authentication and identity management (Clerk)
• Cloud infrastructure and hosting services
• Email delivery for account notifications

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

Because we store minimal personal data, our retention obligations are limited. We retain data only as long as necessary to provide our service.

• QR Code Data: Retained while your account is active. When you delete a QR code or close your account, the data is permanently deleted
• Usage Analytics: Scan statistics and timestamps are retained to provide you with insights. Individual scan records may be aggregated or anonymized over time
• Personal Information: Your email and name are managed by Clerk and subject to their retention policies. When you delete your account through Clerk, this information is removed

When you delete your account, we permanently delete your QR codes and account identifier. Any aggregated, anonymized analytics data may be retained for business purposes.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal data under laws such as GDPR (EU), CCPA (California), and similar privacy regulations:

Access and Portability

You have the right to request a copy of the personal data we hold about you in a portable format.

Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most account information directly in your account settings.

Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data, subject to certain exceptions (such as legal obligations to retain records).

Restriction of Processing

You have the right to request that we limit how we use your personal data in certain circumstances.

Objection

You have the right to object to our processing of your personal data for direct marketing purposes or based on legitimate interests.

Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your privacy rights.

How to Exercise Your Rights

To exercise any of your privacy rights, contact us at support@qrpunk.com. We handle all data requests in one place:

• Access your data: We will provide a copy of your QR codes, usage analytics, and account information
• Correct your data: Update your profile information through your account settings, or contact us for assistance
• Delete your account: Request account deletion and we will permanently remove all your data, including QR codes, analytics, and personal information

We aim to respond to all data requests within 30 days. We may require verification of your identity to protect your privacy.

9. Children's Privacy

Our service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@qrpunk.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Your continued use of our service after changes to the Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@qrpunk.com
• Website: qrpunk.com

QR Punk operates from the United States.