Privacy Policy

This Privacy Policy describes how QR24x7 ("we", "us", "the Service") collects, uses, and safeguards information when you use our website, dashboard, and review pages. By using the Service you agree to the practices described here.

1. Information we collect

• Account data: name, email address, mobile number, and hashed password when you register or sign in with a one-time code.
• Business data: business names, locations, staff names, logos, and Google review links you add.
• Review & feedback data: star ratings and written feedback. Name, mobile, and email are stored only when the customer ticks the consent box on the review form.
• Usage data: pages visited, device type, and a hashed IP address used to count QR scans and limit abuse. The scan hash cannot be turned back into an IP address.
• Payment data: plan checkouts go through our self-hosted YouPI gateway or a manual UPI or USDT transfer. We store the amount, status, UTR when we have one, and the GST invoice. We do not store card numbers.

2. How we use information

• To operate the Service — generating QR codes, showing the public review link, storing private feedback, and delivering dashboards.
• To send transactional alerts (for example when private feedback is not a positive rating) by email or WhatsApp where you have configured them.
• To secure the platform, prevent spam and abuse, and enforce rate limits.
• To process subscriptions and issue invoices.

3. Sharing & disclosure

We do not sell your data. We share information only with service providers who help us run the Service (hosting, payments, email/WhatsApp delivery), and only as needed. We may disclose data if required by law or to protect the rights and safety of users.

4. Consent

The public review form explains what is collected, that only the business owner sees a private complaint, and how to ask for deletion. A customer can submit a rating without sharing contact details. Contact details are saved only after they tick the consent box, and the time of that choice is stored with the review.

5. Data retention, export, and deletion

Signed-in owners can download a JSON copy of their account, businesses, reviews, and feedback from Settings. Deleting the account removes the businesses, reviews, feedback, and profile details, and replaces the login email so the account cannot be used again. Payment rows and GST invoices are kept. Indian tax rules require us to retain those records. The invoice is a snapshot taken when it was issued, so later changes to the profile do not rewrite it.

A business owner can erase a customer's name, email, and phone from a feedback row. That action is written to the audit log.

You can delete the account in the Android app under More, or on the web at the account deletion page. That page asks for a one-time code sent to the mobile number on the account. The invoice exception above still applies.

6. Security

Passwords are hashed with bcrypt, inputs are validated and sanitised, and sensitive traffic is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your information.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you can access, correct, export, or ask us to erase your personal data. Use Settings while signed in, or contact the email in the site footer. Tax invoices are the exception described above.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.