Privacy Policy
Last updated: March 27, 2026
QR Lama ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using QR Lama, you consent to the practices described in this policy.
1. Information We Collect
Account Information: When you register, we collect your email address and password. If you sign up via Google OAuth, we receive your name, email address, and profile photo from Google.
QR Code Data: We store the QR codes you create, including their destination URLs, design settings, names, and associated metadata.
Payment Information: Payment processing is handled by Stripe. We do not store your full credit card number. Stripe may collect your card details, billing address, and transaction information in accordance with their own privacy policy.
Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken within your dashboard.
2. How We Use Information
We use the information we collect to: provide and maintain the Service; process your transactions and manage your subscription; send you service-related communications (such as trial reminders and password reset emails); improve and personalize the Service; monitor usage patterns and analyze trends; prevent fraud and ensure security; and comply with legal obligations.
3. QR Code Scan Data
When someone scans a dynamic QR code created through QR Lama, the scan passes through our servers before redirecting to the destination. During this process, we collect: browser type and version, operating system, date and time of the scan, approximate geographic location (derived from IP address), and device type. This data is used to provide scan analytics in your dashboard. IP addresses are not stored permanently and are only used to derive approximate location data.
4. Cookies
We use cookies and similar technologies to maintain your session, remember your preferences, and provide a smooth user experience. Essential cookies are required for the Service to function (such as authentication session cookies). You can control cookie settings through your browser, but disabling essential cookies may affect the functionality of the Service.
5. Third-Party Services
We use the following third-party services that may collect and process your data:
Stripe: For payment processing. Stripe collects your payment card details and billing information. See Stripe's Privacy Policy.
Google OAuth: If you choose to sign in with Google, we receive your name, email address, and profile photo. We do not access any other Google account data. See Google's Privacy Policy.
Resend: We use Resend for transactional email delivery (such as trial reminders, password reset emails, and account notifications). Your email address is shared with Resend for this purpose. See Resend's Privacy Policy.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. QR code scan analytics data is retained for as long as the associated QR code exists. After account deletion or subscription cancellation, deactivated QR code data may be retained for up to 90 days before permanent deletion.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: the right to access and receive a copy of your data; the right to rectify inaccurate data; the right to request deletion of your data; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent. If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). To exercise any of these rights, please contact us at the email below.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
9. Contact
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@qrlama.com.
