Last updated: November 01, 2026 · qrcodemaker · https://qrcodemaker.tech
The data controller for this Service is:
2.1 Information you provide directly:
2.2 Information collected automatically:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / legitimate interests |
| Service notifications (billing, security, policy updates) | Legitimate interests |
| Security and fraud prevention (including prompt & content safety screening) | Legitimate interests |
| Product optimization and analytics | Legitimate interests |
| Legal compliance | Legal obligation |
We may aggregate or de-identify data for statistical analysis. Such data cannot identify you personally.
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Login sessions, core functionality | No |
| Functional | Preferences, personalization | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
Analytics tools used: Google Analytics 4 (Google Privacy Policy) and Microsoft Clarity (Microsoft Privacy Statement) on public pages. These tools are loaded only when configured; you can opt out via your browser settings (such as Do Not Track, blocking third-party scripts) or cookie controls.
We do not sell your personal information, including as "sale" is defined under applicable law (such as the CCPA). We share your information only in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and the relevant supervisory authorities within 72 hours of becoming aware, as required by applicable law. Please safeguard your account credentials and do not share them with others.
| Data Type | Retention | After expiry |
|---|---|---|
| Account information | While active; 90 days after cancellation or deletion | Deleted or anonymized |
| Transaction records | As required by law (typically 7 years) | Deleted or archived |
| Support communications | 2 years | Secure deletion |
| Security & audit logs | 12 months | Secure deletion |
| Generated content (QR codes, AI art) | While your account is active | Deleted with account |
To exercise any of the following rights, contact us at privacy@qrcodemaker.tech; we will respond within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete information |
| Right to erasure | Request deletion of your data under certain conditions |
| Right to restrict processing | Pause processing in certain circumstances |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests or marketing |
| Right to withdraw consent | Withdraw consent-based processing at any time |
If you believe we have not handled your request properly, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send marketing information by email or in-app notifications. You can opt out at any time: click the "unsubscribe" link in emails, disable marketing notifications in your account settings, or contact us. Opting out does not affect essential service notifications (such as billing and security alerts).
Our servers and partners may be located in jurisdictions other than yours (such as the United States and Singapore). Where data is transferred across borders, we protect it through:
The Service is intended for users aged 18 and older. We do not knowingly collect information from anyone under this age. If you believe a child has provided us with personal information, contact us immediately and we will delete it promptly. Our Acceptable Use Policy additionally prohibits generating any content that sexualizes or endangers minors.
The Service may contain links to third-party websites or integrate third-party services. This Policy applies only to information collected directly by us. We are not responsible for third-party data practices; please review their policies before use.
For material changes, we will notify you at least 15 days in advance via a platform announcement or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
This policy is provided for information and does not constitute legal advice.