Politica de privacidad

1. Introduction

QR Code Nova ("we", "us", "our") operates the website qrcodenova.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with QR codes created through our platform.

2. Data Roles

When you create an account and use the Service, QR Code Nova acts as the Data Controller for your account information and usage data.

When end users scan QR codes created by our customers, QR Code Nova acts as a Data Processor on behalf of the QR code owner (the "Customer"), who is the Data Controller for any data collected through their QR codes. Customers are responsible for ensuring their own compliance with applicable privacy laws when using scan analytics provided by the Service.

3. Information We Collect

3.1 Account Holders

When you create an account or use the Service, we may collect:

• Account information: Name, email address, and authentication credentials.
• Payment information: Billing details processed securely through a third-party payment processor. We do not store your full credit card number.
• Usage data: QR codes created, feature usage, and pages visited.
• Device and log data: Browser type, operating system, referring URLs, and timestamps.
• Security data: Login activity, security events, and audit logs to protect your account.

3.2 QR Code End Users (Scanners)

When someone scans a QR code created through our Service, we collect limited, pseudonymized analytics data to provide scan statistics to the QR code owner. This includes:

• Approximate geographic location (country and city level, derived from IP address)
• Device type, operating system, and browser
• Referring URL and language preference
• Date and time of the scan

We do not store raw IP addresses for scan analytics. IP addresses are processed through a one-way hash to detect unique visitors and are not reversible to identify individuals.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities in connection with the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Provide QR code owners with aggregated, pseudonymized scan analytics
• Understand aggregate traffic and conversion patterns on our public website using privacy-friendly analytics

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal data includes:

• Contract: Where processing is necessary to perform a contract with you (for example, creating your account or providing QR code management tools).
• Legitimate interest: Where processing is necessary for our legitimate interests, such as improving the Service, preventing fraud, securing accounts, and understanding aggregate website usage.
• Consent: Where you have explicitly opted into specific optional cookies or marketing measurement.
• Legal obligation: Where we need to comply with applicable law.

6. Data Sharing

We do not sell your personal data. We may share your information with the following categories of recipients:

• Service providers: Third parties that perform services on our behalf, including payment processing, email delivery, hosting, content delivery, security, and privacy-friendly website analytics.
• Advertising and attribution partners: Where applicable, we may use consent-based analytics or send limited conversion data related to signups or purchases to measure campaign performance.
• Legal requirements: When required by law, regulation, or legal process, or to protect our rights, privacy, safety, or property.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

7. Cookies & Tracking Technologies

QR Nova uses essential cookies required for authentication, security, checkout, and locale preferences.

For public-site traffic analytics, we use Plausible Analytics. Plausible is configured without cookies, persistent identifiers, or cross-site tracking. This lets us measure aggregate pageviews, referrers, and conversion events without relying on consent mode or analytics cookies.

Separately, if you opt into optional cookies, Google Tag Manager may load Google Analytics and advertising-related tags for deeper campaign measurement.

Our QR scan analytics are separate from website analytics. They are tied to QR code usage and are processed as part of the Service we provide to account holders.

8. Third-Party Services

We use trusted third-party service providers to operate the Service. These providers may process your data on our behalf in the following categories:

• Payment processing: To securely handle subscriptions and payments.
• Email delivery: To send transactional emails such as account verification, password resets, and security notifications.
• Authentication: We offer sign-in through third-party identity providers (e.g., social login). When you use these providers, their respective privacy policies apply.
• Hosting, CDN, and security: To deliver the Service reliably, protect against attacks, and ensure availability.
• Website analytics: To understand aggregate public-site usage without using tracking cookies.
• Consent-based marketing analytics: To measure campaign performance when you have opted into optional cookies.

A list of our current sub-processors is available upon request by contacting privacy@qrcodenova.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction.

Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the recipient's certification under an applicable data transfer framework.

10. Data Retention

• Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Scan analytics: Retained for the duration of the QR code owner's subscription. Pseudonymized scan data is deleted when the associated account is deleted.
• Security and audit logs: Retained for up to 12 months for fraud prevention and legal compliance.

When you request account deletion, we provide a grace period during which you can cancel the request. After the grace period expires, all your data — including QR codes, scan analytics, and associated records — is permanently deleted.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.

12. Your Rights

12.1 General Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time where consent is the legal basis

12.2 California Residents (CCPA/CPRA)

If you are a California resident, you additionally have the right to:

• Know what personal information is collected, used, and shared
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Non-discrimination for exercising your privacy rights

We do not sell your personal information. To exercise any of your rights, contact us at privacy@qrcodenova.com.

13. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If we discover that a child under 16 has provided us with personal data, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@qrcodenova.com.