Privacy Policy

AllQR (allqr.co) is a QR code generation and management service operated by Vthinksolution, Surat, Gujarat, India. In this policy, "We", "Us" and "Our" mean Vthinksolution, and "You" and "Your" mean anyone who visits allqr.co, creates an account, creates or manages QR codes, or scans a QR code created on AllQR.

This policy explains what information we collect, why we collect it, how long we keep it, who we share it with, and the choices you have. By using allqr.co you agree to this policy. If you do not agree, please do not use the website.

This policy is an electronic record under the Information Technology Act, 2000 and is published in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and, where applicable, the Digital Personal Data Protection Act, 2023. It does not require any physical or digital signature.

1. Information We Collect

a) Account information

When you register or sign in, we collect:

• Your name and email address
• Your password, stored only in hashed (not readable) form
• If you sign in with a third-party login (for example Google), the basic profile details that provider shares with us, such as name and email
• Your plan or subscription status and basic account settings

b) QR code content (the data you put inside a QR code)

Depending on the QR type you choose, this can include website URLs, plain text, Wi-Fi network name and password, contact (vCard) details such as name, phone number, email and address, email or SMS content, social media links, business or menu information, and similar fields you enter. We store this content so that we can generate, display, edit and (for dynamic QR codes) serve your QR code.

c) Uploaded files

Some QR types let you upload files such as PDFs, images, logos, menus, or other documents. We store these files so they can be shown to people who scan your QR code. Files linked to a QR code are accessible to anyone who has the QR code or its link. Please upload only files you have the right to share.

d) Scan analytics (information about people who scan your QR code)

For dynamic QR codes, each scan passes through an AllQR link so that we can redirect the visitor and record statistics for the QR code owner. For each scan we may record:

• Date and time of the scan
• Approximate location (country, state/region and city), derived from the IP address
• Device type, operating system and browser, derived from the browser's user-agent
• Referrer and the QR code that was scanned
• A technical identifier (such as a hashed or truncated IP address, or a cookie) used to tell new and repeat scans apart

We do not ask scanners for their name, phone number or email, and we do not use scan data to identify individual people. Scan statistics are shown to the owner of the QR code in their dashboard.

e) Payment information

If you buy a paid plan, payment is handled by our third-party payment gateway. We do not receive or store your full card number, CVV, UPI PIN or net-banking credentials. We keep only transaction records such as the plan purchased, amount, date, payment status and a payment reference ID, along with billing details needed for invoices.

f) Support communications

If you contact us by email, phone or through a form, we keep your message and contact details so we can respond and keep a record of the request.

g) Technical and log data

Our servers automatically record your IP address, browser type, device, pages visited and error logs when you use the website. We use this for security, fraud and abuse prevention, troubleshooting and improving the service.

2. What We Do Not Collect

AllQR does not ask for and does not intentionally collect:

• Medical or health records
• Biometric information
• Sexual orientation, gender, or age
• Full credit/debit card or bank account details
• Precise GPS location of scanners

If you enter such information inside a QR code yourself, it is stored only as part of your QR content and you are responsible for it (see section 1b).

3. How We Use Your Information

• To create your account, sign you in and keep your account secure
• To generate, store, edit and serve your QR codes, including redirecting scans of dynamic QR codes
• To host the files you upload and display them to people who scan your QR codes
• To provide scan analytics and usage statistics in your dashboard
• To process payments, issue invoices and manage subscriptions
• To send service messages such as account verification, password reset, billing notices and important policy or service updates
• To detect and prevent spam, phishing, malware, fraud and other misuse of the service
• To understand how the website is used and improve it
• To comply with legal obligations

We do not use your QR content or uploaded files for advertising, and we do not sell your personal data.

4. Dynamic QR Codes

A dynamic QR code contains a short AllQR link instead of your final content. When someone scans it, their request goes to AllQR first, we record the scan details described in section 1d, and then send them to your destination (a URL, file, or page). This is what allows you to change the destination later and see analytics.

• The destination is visible to anyone who scans the code.
• If you delete a dynamic QR code or your account, the short link stops working and existing printed codes will no longer redirect.
• If a subscription ends, dynamic QR codes may be paused or limited as described in our terms. Please keep a backup of anything you need.
• Static QR codes contain your content directly and do not pass through AllQR when scanned, so we do not record scans for them.

5. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

You can change non-essential cookie choices on our Cookies Preferences page, and you can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the website from working. We do not run third-party advertising cookies on allqr.co.

6. Third-Party Services

We use trusted service providers to run AllQR. They process data only to perform services for us and are expected to protect it. These include:

• Hosting and storage providers – to run the website, database and store uploaded files
• Payment gateway – to process payments for paid plans
• Email delivery service – to send verification, password reset and billing emails
• Analytics provider – to measure website usage
• Sign-in providers – such as Google, if you choose to log in with them
• IP-to-location lookup – to estimate the city/country of a scan from its IP address

We may also share information with our group companies, officers and employees who need it to operate the service, and when required by law (see section 9). Our site may contain links to other websites. We do not control them and are not responsible for their privacy practices. When your QR code points to an external site, that site's own policy applies.

Some of these providers may store or process data on servers outside India. We take reasonable steps to ensure appropriate protection when data is transferred.

7. Data Storage, Retention and Deletion

Your data is stored on secured servers and in a protected database. We keep data only as long as needed for the purposes described in this policy:

How to delete your data

• Delete a QR code or file: do this from your dashboard. The related scan analytics are removed with it.
• Delete your account: use the account deletion option in your settings, or email us at the address in section 11 from your registered email address. We will delete or anonymise your personal data, QR codes, files and analytics within a reasonable time (normally within 30 days).
• Exceptions: we may keep limited data where the law requires (for example billing records), or where needed to resolve disputes, enforce our terms or prevent abuse.
• Backups: deleted data may remain in encrypted backups for a short period before being overwritten.

8. When We May Disclose Information

Apart from the service providers described above, we disclose personal information without your consent only when:

• it is requested or required by law, a court, or a governmental agency or authority, including for verification of identity, or for prevention, detection, investigation (including of cyber incidents), prosecution and punishment of offences; or
• it is reasonably necessary to enforce our terms, or to protect the rights, safety or property of AllQR, our users or the public (for example, investigating phishing or malware links).

If Vthinksolution is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, and we will ask the new owner to honour this policy.

9. Information Security

We take reasonable security measures to protect against unauthorised access, alteration, disclosure or destruction of data. These include encrypted connections (HTTPS), hashed passwords, firewall-protected servers, restricted and password-protected access to systems, and regular reviews of our data collection, storage and processing practices.

No system is completely secure, and we cannot guarantee that information will never be intercepted or accessed without authorisation. Please use a strong, unique password and keep your login details private. If you notice any suspicious activity on your account, contact us immediately.

10. Your Rights and Choices

You may, at any time:

• View and update your account details and QR codes from your dashboard
• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data or account (see section 7)
• Withdraw consent for non-essential cookies through the Cookies Preferences page
• Opt out of non-essential emails (service and billing emails may still be sent)

To make a request, email us from your registered email address. We may need to verify your identity before acting on it.

11. Children

AllQR is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will delete it.

12. Misuse and Reporting

You must not use AllQR to create QR codes or upload files that are illegal, deceptive, harmful, or that spread malware or phishing. We may review reported QR codes, and suspend or remove them and the related content. To report an abusive QR code, contact us using the details below.

13. Changes to This Policy

We may update this policy from time to time. When we do, we will change the "Last Updated" date at the top of this page and, for significant changes, notify you by email or a notice on the website. Continued use of AllQR after an update means you accept the revised policy.

14. Governing Law

This policy is governed by the laws of India. Any dispute arising from it will be subject to the exclusive jurisdiction of the courts at Surat, Gujarat.