Privacy notice

Quietstack OÜ

Registered address: Sepapaja tn 6, 15551 Tallinn, Estonia

QRTech stores account details, your pages and uploads, form submissions, subscription status and security records to provide the service. Published content is available to anyone with its link. Avoid publishing private information.

Customer-page analytics and storage

QRTech measures QR-channel visits and ordinary link visits separately using coarse country, device and browser information. It does not set advertising cookies or save full IP addresses in analytics. IP addresses and user agents may be used for login security and abuse prevention. External media remains blocked until you allow it.

Public visit counters keep an anonymous total until the page is deleted. They do not identify visitors.

Language and appearance preferences stay saved in your browser until cleared. Cookie preferences are requested again after 180 days or a notice update. Authentication expires with your session.

Optional Google website and advertising measurement

With your permission, QRTech uses Google Analytics through Google Tag Manager on its own marketing pages to measure page views, creation-button clicks and sample opens. Our server can send one completed-signup event from the same consented session and share it with Google Ads to measure advertising results. We do not measure browsing in customer pages, editors or private workspaces.

After consent, Google measurement may use ad-click identifiers (gclid, gbraid or wbraid) to connect a completed signup with an ad. Temporary browser, session and click context lasts up to 30 minutes; the single-use signup confirmation is valid for five minutes. We send the signup method and approved campaign labels, not names, email addresses, account IDs or customer content.

Google Analytics uses cookies and processes cookie identifiers, usage, browser and device information and approximate location. QRTech does not intentionally send names, email addresses, customer content or full page query strings to Google.

Google ad personalization and Google signals are disabled. QRTech does not create remarketing audiences from this measurement.

Google may process this data in other countries. Google Analytics user and event data is retained for two months; standard aggregated reports may follow different retention rules. Analytics cookies are configured to expire after 180 days.

Google Ads cookies may last up to 90 days after an ad click.

Website and advertising measurement is optional. You can refuse or withdraw consent in Cookie preferences without losing product features. Do Not Track and Global Privacy Control keep it off. Withdrawal clears temporary browser context and stops future collection; it does not automatically delete information already sent to Google or Meta.

With your permission, QRTech counts signups, first publications, first menus, QR downloads and sharing actions by source. Temporary source context expires after 30 minutes without renewal. Anonymous daily totals are retained for 90 days, without account-linked campaign history, raw URLs or customer content. Refusal and withdrawal preserve every product feature. Withdrawal clears temporary context and stops future collection; existing anonymous totals remain. Do Not Track and Global Privacy Control keep this measurement off.

Optional advertising measurement

With your permission, QRTech uses the Meta Pixel for marketing-page views and one completed-signup event. After consent, the Facebook ad-click identifier (fbclid) may be used for attribution. We do not measure browsing in customer pages, editors or private workspaces, and do not intentionally send names, email addresses or customer content to Meta.

Meta receives browser and cookie identifiers, network information including your IP address, and browser and device information. Meta may process data in other countries. Its _fbp and _fbc cookies can last up to 90 days and may be renewed on later consented visits. Withdrawal removes QRTech’s Meta cookies and stops future collection; it does not automatically delete information already sent to Meta.

QRTech uses this measurement to understand advertising results, not to create remarketing audiences. Meta’s processing is governed by its own privacy terms.

Retention

Free QR codes do not expire, including after the Premium trial. Automatic inactivity cleanup is disabled.

Plan limits still apply. Content outside your plan follows a separate 90-day recovery period, with email warnings one month and one week before deletion.

Configured retention: analytics 90 days, form responses 365 days and unused uploads 90 days. Warning periods may extend these times. Cloudflare Analytics Engine has its own provider retention window.

AI processing

Using AI Agent sends your messages, attachments and relevant workspace content to the AI provider configured by QRTech (Azure OpenAI, OpenAI or another compatible service) to answer requests and build content. Do not upload information you are not authorized to share.

QRTech keeps chat history and source files in private Cloudflare storage. The AI provider may process data in another country under its own retention and service terms. A request not to store responses does not guarantee zero provider retention. Use Settings → Privacy to export data or raise a privacy request.

Administrators choose when inactive conversations become eligible for cleanup. Automatic cleanup follows the retention policy, warning emails and holds; you can also delete chats yourself.

Your rights

Use Settings → Privacy to export your data or request access, correction, erasure or objection. Requests are reviewed within one month. You may also complain to your data protection authority. Billing obligations and active subscriptions may require review before erasure.

Cloudflare processes hosting and storage. Resend processes transactional email; Stripe processes payments when configured. Social sign-in uses the provider you select. These providers may process data outside your country. Page owners are responsible for their form questions and the personal information they collect.

Contact the administrator through a privacy request in your account settings.