Privacy Policy
Last updated: January 1, 2025
1. Information We Collect
1.1 Account Information (Required)
To create and manage your account, we collect:
- • Full name (first and last names)
- • Email address
- • Encrypted password
- • Two‑Factor Authentication (2FA) Settings – Encrypted Backup Codes (Optional)
1.2 Google Authentication Information (Optional)
If you choose to sign in with Google, we also collect:
- • Google ID
- • Google email
- • Google profile photo
1.3 Digital Card Information (Optional)
When creating digital cards, you can include:
- • Contact information (email, phone numbers)
- • Professional information (position, company, description)
- • Physical address (optional)
- • Social media links
- • Images (avatar, logo, cover image)
- • Design customization (colors, templates)
1.4 Automatic Technical Information
Automatically we collect technical information for the operation of the service:
- • IP address and approximate geographic location
- • Device type, browser, and operating system
- • Visited pages and time spent
- • Actions performed on cards (clicks, downloads)
2. How We Use Your Information
We use the information collected exclusively for:
- • Create and manage your user account
- • Provide digital card service
- • Generate custom QR codes
- • Process payments and manage subscriptions
- • Provide usage analytics and statistics
- • Send important service notifications
- • Improve and optimize our platform
3. Share Information
We do not sell, rent or share your personal information with third parties, except in the following cases:
- • With their explicit consent
- • With essential service providers (Stripe for payments, Google for authentication)
- • When legally required by competent authorities
- • To protect our legal rights or the safety of other users
4. Data Security
We implement technical and organizational security measures to protect your information:
- • SSL/TLS encryption for all communications
- • Encrypted passwords with bcrypt hashing
- • Optional two-factor authentication (2FA) for added security
- • Restricted access to personal data
- • Continuous security monitoring
5. Data Retention
We keep your personal information only for as long as necessary:
- • Account data: While your account remains active
- • Digital cards: Until I delete them or close your account
- • Analytics: Maximum 2 years for trend analysis
- • Payment data: In accordance with legal and accounting requirements
6. Your Rights
You have the right to:
- • Access your personal information
- • Correct inaccurate or incomplete data
- • Request the deletion of your information
- • Export your data in standard format
- • Revoke consent at any time
- • Submit a complaint to the data protection authority
7. Cookies and Similar Technologies
We use cookies and similar technologies for:
- • Keep your session active
- • Remember your preferences
- • Analyze the use of the service
- • Improve platform functionality
International Transfers
Your information may be processed on servers located in the European Union. We guarantee that these transfers comply with GDPR and we use appropriate safeguards.
9. Minors
Our service is not intended for individuals under 18 years of age. We do not intentionally collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
10. Changes to this Policy
We may update this privacy policy from time to time. We will notify you of any material changes by email or through a notice on our website. We recommend reviewing this policy periodically.
11. Contact
If you have questions about this privacy policy or your rights, contact us:
Data Protection Officer
Main Email: privacy@card-qr.com
Support Email: support@card-qr.com
Legal Email: legal@card-qr.com
Administration Email: admin@card-qr.com
Important note: For ARCO rights requests (Access, Rectification, Cancellation, Opposition), use only privacy@card-qr.com. For general legal inquiries, you may use legal@card-qr.com.
RGPD Form: To exercise your data protection rights more easily, you can use our online GDPR request form that will guide you step by step.