How QR Prism collects and uses personal data.
1. Who we are
QR Prism ("we") provides a QR code and barcode platform at qrprism.com. This Privacy Policy explains what personal data we collect, why, and your rights. Contact: admin@qrprism.com.
2. Data we collect
- Account data: name, email, password hash, plan, billing details you enter, language and timezone.
- Usage data: QR codes, barcodes, short links, projects and files you create; login timestamps and IP-derived location for security.
- Scan analytics: when someone scans a dynamic QR or visits a short link we may record timestamp, country/city (from IP), device, browser, OS and referrer. We do not sell this data.
- Payments: checkout is processed by PayPal. We receive confirmation, amount, currency and PayPal transaction IDs. We do not store full payment-card numbers.
- Support: messages you send to us, including via the contact form.
- Cookies: session, preference and (if you enable them) analytics cookies. See cookie settings on the site.
3. Why we process data
To provide the Service, authenticate users, bill paid plans, prevent abuse, measure QR performance for you, send transactional email (activation, password reset, invoices) and improve the product. Legal bases include contract, legitimate interests and, where required, consent.
4. Sharing
We share data with: PayPal (payments); our hosting and email providers; OpenAI when you use AI QR generation (the prompt/content you submit is sent to OpenAI to produce the image). We do not sell personal data. We may disclose information if required by law or to protect the Service and users.
5. Retention
Account and QR data are kept while the account is active. After deletion we remove or anonymize personal data within 30 days, except records we must keep for tax, fraud prevention or legal claims. Scan logs follow the retention of your plan.
6. Security
We use HTTPS, hashed passwords and access controls. No method of transmission is 100% secure. You are responsible for keeping your credentials private.
7. International transfers
Servers and subprocessors may be located outside your country. Where required we use appropriate safeguards.
8. Your rights
Depending on your location you may access, correct, export or delete your data, object to processing, or withdraw consent. Email admin@qrprism.com. You may also lodge a complaint with your local data-protection authority.
9. Children
The Service is not directed to children under 16. We do not knowingly collect their data.
10. Changes
We will post updates here and revise the date below. Material changes will be notified by email when reasonably possible.
Last updated: 19 August 2026.