Privacy Policy

1. Who we are

JustQRs (justqrs.com) is operated by Votivigy LLC ("Votivigy", "we", "us"). This policy explains what personal data we collect, why, and the choices you have. It covers two groups of people: JustQRs account holders, and people who scan QR codes created with JustQRs. Questions or requests: privacy@justqrs.com.

2. If you have a JustQRs account

We collect and process:

• Account data — your email address and a password credential, managed by Amazon Cognito. If you sign in with Google, we receive your email address from Google; we never see your Google password.
• Billing data — handled by Stripe, our payment processor. Your card number never touches our servers; we store only your Stripe customer reference and subscription status.
• Content you create — your QR codes, their destinations, designs, and landing pages, stored so we can provide the service.
• Usage analytics — with your consent, we use Google Analytics to understand how the website is used. See our Cookie Policy.
• Transactional email — we send account email (confirmation codes, billing notices) via Mailgun.

We use this data to provide and improve the service, process payments, and communicate with you about your account. We keep it while your account exists; when you delete your account we delete it, except where the law requires us to retain records (for example, billing records).

3. If you scanned a QR code

When you scan a QR code made with JustQRs, our redirect service processes the request on behalf of the code's creator and records the following about the scan: approximate location (country and city), device type, operating system, and browser. When your browser provides one, we also record the address of the page that referred you to the QR code (the referer).

Your IP address and browser user agent are used only transiently: they are combined into a one-way hash to count daily unique scans, and that hash is automatically deleted within 48 hours. We do not store your raw IP address with any scan record, and scan records are never tied to your identity. Individual scan records are automatically deleted about 13 months after the scan.

The website a QR code sends you to is chosen by the code's creator and has its own privacy practices, which we don't control.

4. Service providers

We share data only with the providers that run the service:

We do not sell personal information, and we don't share it with advertisers.

5. Cookies

Our use of cookies and similar storage is described in the Cookie Policy. Analytics cookies are set only if you accept them.

6. Your rights

If you are in the EU, UK, or a jurisdiction with similar law (GDPR), you may request access to, correction of, or deletion of your personal data, receive a portable copy, or object to processing. If you are a California resident (CCPA), you may request to know what we collect, request deletion, and opt out of the sale of personal information — though, as above, we do not sell personal information.

To exercise any of these rights, email privacy@justqrs.com. We will respond within the time the applicable law requires.

7. Security and international transfer

Data is encrypted in transit (TLS) and at rest on AWS infrastructure. The service is operated from the United States; if you use it from elsewhere, your data is processed in the US.

8. Children

JustQRs is not directed at children under 13, and we do not knowingly collect their personal data.

9. Changes to this policy

If we make material changes, we will update the date at the top of this page and, for significant changes affecting account holders, notify you by email.

10. Contact

Votivigy LLC · privacy@justqrs.com