Privacy Policy
Last updated: August 2026
1. Introduction
This Privacy Policy explains how OneQR ("we", "us") collects, uses, and protects information when you use our platform. By using OneQR, you agree to the practices described here. This is a generic SaaS template and should be reviewed by legal counsel for your jurisdiction before production use.
2. Information We Collect
We collect: (a) Account information you provide — business name, owner name, email, mobile number. (b) Business profile content you create — links, logos, descriptions. (c) Analytics data — QR scans, link clicks, device type, and approximate region, collected anonymously. We do NOT store raw IP addresses or personal data of your customers who scan QR codes.
3. How We Use Your Information
We use your information to: provide and maintain the service, process payments, send account and subscription notifications, generate aggregated analytics, prevent fraud and abuse, and comply with legal obligations.
4. Data Sharing
We do not sell your data. We share data only with: payment processors (e.g. Razorpay) for subscription payments, email service providers for transactional emails, and authorities when legally required. All third parties are bound by confidentiality obligations.
5. Data Security
We protect your data with: hashed passwords (bcrypt), secure HTTP-only cookies, JWT session tokens, encrypted connections (HTTPS), input validation, and rate limiting. Payment data is handled entirely by our payment processor — we never store card numbers.
6. Data Retention
We retain your data for as long as your account is active. You may request deletion of your account and data at any time. Analytics data is retained in aggregated, anonymized form.
7. Your Rights
Depending on your jurisdiction, you may have rights to: access your data, correct inaccurate data, delete your data, export your data, and object to certain processing. Contact us to exercise these rights.
8. Cookies
We use essential cookies for authentication and session management. See our Cookie Policy for details.
9. Children's Privacy
OneQR is not intended for use by children under 16. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email. Continued use after changes constitutes acceptance.
11. Contact
For privacy questions, contact us via the Contact page.