Skip to main content
Back to QRSprint

Legal

Privacy Policy.

Last updated, June 2026

Plain English first: QRSprint is built around your real contact details stay private. Anyone who scans your tag reaches you through QRSprint, they never see your real phone number or email. We collect the minimum needed to make that work.

What we collect

  • Your email address, name, and tag details when you create an account or claim a Smart Tag
  • Any optional profile fields you fill in (medical alerts, pet info, emergency contacts)
  • Scan events when someone scans your tag: rough device type, approximate region, timestamp
  • Standard server logs (IP address, user-agent, request path) kept for 14 days for diagnostics, then deleted
  • Payment information is handled entirely by our payment processors (see below). We never see or store your card details.

What we do NOT do

  • We do not sell your data, ever
  • We do not run ad networks or third-party analytics scripts on public scan pages
  • We do not share your real contact details with people who scan your tag
  • We do not retain message content beyond 30 days

Who sees what

  • A stranger who scans your tag sees: your first name, your tag type, optional medical or pet info, and a button to contact you through QRSprint
  • You, the owner, see all your tag activity in the dashboard
  • QRSprint engineers access only what is needed to operate the platform (aggregate scan counts, error logs). We do not browse personal profiles.

Third-party services we use

  • Resend, for transactional email delivery (magic-link sign-in, order confirmations). Your email address is shared with Resend only to send email to you.
  • Razorpay, for payment processing in India. Governed by Razorpay's PCI-DSS compliance.
  • Lemon Squeezy, for international payment processing. Acts as Merchant of Record for non-India transactions.
  • Botbiz (Meta WhatsApp Cloud API), for masked relay message routing where applicable.
  • Let's Encrypt, for HTTPS certificates.
  • That is the full list. No Google Analytics, no Facebook pixel, no Hotjar, no session-recording tools.

Cookies and local storage

We set a single session cookie to keep you signed in. No advertising cookies, no cross-site tracking. You can clear it any time by signing out or clearing your browser data.

Data retention

  • Account and tag data: retained for as long as your account is active
  • Scan logs: retained for as long as the tag exists
  • Server access logs: 14 days, then deleted
  • Message relay logs: 30 days, then deleted

Your rights

Depending on where you are, you may have rights to access, correct, export, or delete your personal data. We honour all such requests regardless of jurisdiction. Email founders@qrsprint.com from the address you signed in with and we respond within 5 business days.

How to delete your data

Open your dashboard, delete the tag you no longer want, and your profile, emergency contacts, and scan history for that tag are wiped from our database within seconds. To delete your whole account, email founders@qrsprint.com from the address you signed in with, we do it manually within 48 hours.

Children

Smart Tags for Kids are intentionally minimal: only the child's first name, a parent-controlled relay, and optional medical alerts. We do not store full names, addresses, or photos of children in public scan profiles.

Changes to this policy

If we make material changes, we will send a notification to your registered email address before the change takes effect. Continued use after the notice period constitutes acceptance.

Questions? Email founders@qrsprint.com.