Draft. This text describes what the Qrivio software actually collects, but it has not been reviewed by a lawyer. Replace the bracketed parts and have it reviewed, especially for customers in the EU, UK and California.

Privacy Policy

Last updated: [date]

Who is responsible

[Legal company name], [address], operates Qrivio. Contact: hello@qrivio.com.

Businesses that use Qrivio

When you create an account we store your business name, email address, and a scrambled (hashed) version of your password; we never store the password itself. If you pay for a plan, Stripe handles your card; we only receive a customer ID and your plan status.

People who scan a Qrivio code

When someone scans a code, we record for the business that made it:

We don't ask scanners for a name, email or phone number. If a business's page asks people to sign up (for example a VIP list), what they type is stored for that business. For scan data, the business that made the code decides how it's used; Qrivio processes it on their behalf.

What we don't do

We don't sell personal data, and we don't use scan data for our own advertising.

Where data is kept and for how long

[Hosting location.] Account data is kept while the account is open. Scan data is kept until the business deletes it or closes its account. [Retention period after closing.]

Services we use

Stripe (payments) and Cloudflare (network and security). [List any others before launch.]

Your rights

You can ask to see, correct, export or delete your data by emailing hello@qrivio.com. Businesses can download all their scan data from the dashboard at any time. [Add region-specific rights as advised.]

Changes

We'll post any changes here and update the date above.