Privacy Policy

Data we process

Static QR generation can be used without an account. Submitted QR content is processed to generate the requested code and is not used for advertising profiling. Account features process your email address, name if supplied, password hash, sessions, subscription status, API key metadata, QR destinations, saved QR payloads, AI prompts, generated assets, and support messages.

Dynamic QR redirects record minimized scan analytics: scan time, country from infrastructure headers, device class, and referrer hostname. We do not store full visitor IP addresses in scan events.

AI and automation providers

AI QR Art uses Fal.ai for image generation and local scan validation before delivery. Text AI for landing pages and weekly insight summaries uses Microsoft Azure OpenAI. Depending on the feature, prompts, palette instructions, reference image URLs, aggregate scan summaries, and generated output may be processed by those providers. We do not send payment card data to AI providers.

Subprocessors and service providers

We use Hetzner for hosting and database infrastructure, Stripe for checkout, subscription billing, tax/VAT, and metered overage, Microsoft Azure OpenAI for text AI, Fal.ai for AI image generation, and a transactional email provider via SMTP for password reset, account, and weekly insight emails. If enabled, self-hosted Umami handles privacy-friendly analytics after consent, and Sentry handles error monitoring and technical diagnostics.

Legal bases, retention, and transfers

We process account, QR, billing, and support data to perform our contract with you, comply with legal obligations, protect the service from abuse, and improve reliability. Analytics and optional marketing-style measurement are based on consent where required. Data is kept while needed for the service, legal records, security, or dispute handling. Any international transfers may occur through Stripe, Fal.ai, Microsoft Azure, Sentry, or email infrastructure and are handled using provider data-processing terms and transfer safeguards.

Your rights

You may request access, correction, deletion, restriction, objection, or portability of your personal data by contacting support@qr-ify.ai. You may also complain to a competent data protection authority.