Privacy Policy
Effective Date: October 30, 2026 • Version 2.4
1. Our Privacy Philosophy
Qrivo is built with privacy-first principles. We believe that businesses can measure physical marketing engagement accurately without spying on consumers. We never store personal identity information of individuals scanning your QR codes, nor do we track them across other websites.
2. Data Collected When a QR Code is Scanned
When an end-user scans a dynamic Qrivo QR code, our edge routing servers temporarily process the request to redirect them to the destination URL. In doing so, we collect only anonymous, aggregate metrics:
- Coarse Geolocation: Two-letter country code derived from edge network request headers (e.g. US, DE, JP). We do not record street addresses or precise GPS coordinates.
- Device & Browser Category: Coarse client information parsed from the User-Agent (e.g. iOS Mobile, Android, macOS Desktop) to help campaign owners format their destination landing pages.
- Anonymized Unique Scan Identifier: A one-way cryptographic hash of the User-Agent and salt to calculate daily unique scans without persisting personal identifiers.
- Bot & Crawler Detection: Known automated web crawlers and social media preview fetchers are filtered out to ensure analytics accuracy.
3. Data Collected From Registered Customers
When you create an account on Qrivo to generate and manage QR codes, we collect:
- Your email address and workspace display name.
- Authentication credentials (secured via Supabase Auth).
- Billing customer IDs and subscription tier tokens (processed directly via Stripe; Qrivo never touches or stores raw credit card numbers).
4. Cookies and Tracking
Our public redirect engine does not set tracking cookies on scan visitors. The Qrivo management dashboard uses strictly necessary authentication cookies to maintain your login session.
5. Contact Us
If you have any questions or data deletion requests under GDPR or CCPA, contact our privacy engineering team at [email protected].