Privacy Policy

qrcodegenerator.ca (“we”, “us”), operated by Nargis Tanai, an individual based in Ontario, Canada, provides QR code generation and management services. This policy explains what personal information we collect, why we collect it, and your rights under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

We collect the following categories of personal information:

• Account information. Your email address and a securely hashed password when you create an account, plus any optional profile details you choose to provide.
• QR code content. The destinations and data you encode into your QR codes — URLs, vCard contact details, Wi-Fi credentials, plain text, and so on. Static QR codes generated without an account never reach our servers; the encoding happens entirely in your browser.
• Scan analytics. When someone scans a dynamic QR code created in your account, we collect limited technical data about that scan: approximate location derived from the IP address, device and browser type, and the timestamp. This means we collect a small amount of data about people who scan your codes, not only about you as an account holder. This data is used to provide scan analytics to the QR code owner (you).
• Payment information. Payments are handled by our payment processor, Stripe. We do not store your full card number, CVV, or other sensitive payment credentials on our servers — Stripe processes and stores those directly. We retain limited billing records (plan, subscription status, transaction identifiers) for accounting and support.
• Cookies and analytics. We use essential cookies to keep you signed in and to maintain your session. We may also use third-party analytics tools (such as Google Analytics) to understand site usage. You can control or block analytics cookies through your browser settings.

2. How we use information

We use the information above to:

• Provide, maintain, and improve the service.
• Authenticate your account and keep it secure.
• Process payments and manage your subscription.
• Generate scan analytics dashboards for QR codes you own.
• Communicate with you about your account, billing, or service-related matters.
• Debug, monitor, and improve our product over time.

We do not sell your personal information.

3. Legal basis and consent (PIPEDA)

We collect and use your personal information with your consent and as necessary to provide the service you have requested. Where the law requires explicit consent (for example, for non-essential analytics cookies), we ask for it before activating those features.

4. Third parties we share information with

We share limited information with service providers that help us operate qrcodegenerator.ca, only to the extent necessary for them to perform their function:

• Stripe — payment processing.
• Our hosting and infrastructure provider — running the application and storing the database.
• Analytics providers — aggregate site-usage measurement.

These providers are bound by their own contractual and legal obligations to handle your information appropriately. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data retention

We retain your account information and the QR codes you have created for as long as your account is active. Scan analytics are retained for the period necessary to provide the analytics product to you. We may retain certain records (for example, billing records) for longer where required by tax, accounting, or other legal obligations. You may request deletion of your personal information at any time (see “Your rights” below).

6. Security

We use reasonable technical and organisational measures to protect your personal information — including passwords stored as one-way hashes, encrypted transport (HTTPS), and access controls on our infrastructure. No method of transmission or storage is 100% secure, but we work to keep your information safe.

7. Your rights under PIPEDA

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal exceptions.
• Ask questions about our privacy practices or file a complaint.

To exercise any of these rights, email [email protected]. You also have the right to contact the Office of the Privacy Commissioner of Canada if you are not satisfied with how we have handled your concern.

8. International users and data location

Some of our service providers (for example, Stripe and our hosting provider) may store or process data outside Canada. Personal information transferred outside Canada is subject to the laws of the country in which it is processed, which may differ from Canadian privacy law. By using the service, you acknowledge this transfer.

9. Children

qrcodegenerator.ca is not directed to children under 13 (or the applicable minimum age in your province). We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of the page. Material changes will be communicated through the service or by email where appropriate.

11. Contact

Questions, requests, or complaints about this policy? Contact us at [email protected].