Privacy policy

Draft for review. Items in [brackets] need the business details, and this page needs a legal check before launch.

Who we are

SortedQR is operated by [business name], [ABN], [address]. Contact [email protected] about privacy.

What we collect

• The details you put in a QR code. For Locked codes they stay in your browser and the image. For Free and Editable codes we store them to serve the scan page.
• Your linked email for Editable codes, and an optional receipt email for Locked codes.
• Scan counts for Editable codes: time, rough device type, and a one-way hash of IP address and browser so we can count unique scans. We never store the IP address itself.
• Leads that scanners choose to send you through a contact card page. They go to you, the code's owner.
• Payment details are handled by Stripe. We never see or store card numbers. We keep your country and, if you give one, your business tax ID, to work out tax and issue tax invoices.

Who processes it

Stripe (payments), [email provider] (receipts and sign-in codes), [hosting provider] (servers and database), and [analytics provider, if any]. Each processes data only to provide its service to us.

How long we keep it

Editable codes and their scan counts are kept for as long as the code exists. Free QR data is deleted 30 days after the code expires. Sign-in codes expire after 10 minutes.

Your choices

You can ask us for a copy of your data, to correct it, or to delete an Editable code and its data. Under the Australian Privacy Principles and, where it applies, the GDPR, you can also complain to the regulator in your country.

Cookies

We use only the storage the site needs to work, such as remembering your draft QR and your sign-in for one visit. [Add analytics or advertising cookies here if they are introduced.]