Privacy Policy

1. Introduction

Welcome to BulkQR.io ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our QR code generation service.

If you have any questions or concerns about this Privacy Policy or our practices, please contact us at hello@bulkqr.io.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account
• Subscribe to our services
• Contact us for support
• Use our QR code generation features

This information may include:

• Name and email address
• Payment information (processed securely through Stripe)
• QR code content and customization preferences
• Communication preferences

2.2 Information Automatically Collected

When you use our service, we automatically collect certain information, including:

• Usage data (features used, time spent, interactions)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Log data (access times, pages viewed, errors)

2.3 User-Uploaded Content (CSV Files)

When you use our bulk QR code generation feature, you may upload CSV files containing data to be encoded into QR codes. This data may include personal information such as:

• Names, email addresses, and phone numbers
• Physical addresses and location data
• URLs and web addresses
• Any other data you choose to include in your CSV files

Important: As the user uploading this data, you are the Data Controller under GDPR, and you are responsible for ensuring you have the legal basis to process this personal information. BulkQR.io acts solely as a Data Processor, processing this data only to generate QR codes according to your instructions.

We process uploaded CSV data as follows:

• Processing: CSV data is processed temporarily in memory to generate your QR codes
• Storage: The generated QR codes and associated metadata are stored in your account for the duration of your subscription
• CSV File Retention: Original CSV files are not permanently stored; they are processed and then discarded
• Deletion: You can delete generated QR codes and associated data at any time through your account dashboard
• Account Deletion: When you delete your account, all associated QR codes and data are permanently deleted within 30 days

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our QR code generation services
• To process CSV files and generate QR codes according to your instructions
• To process your transactions and manage your subscriptions
• To send you service-related communications and updates
• To respond to your inquiries and provide customer support
• To analyze usage patterns and optimize our service
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our terms
• To send marketing communications (with your consent, where required)

Data Processing Limitations: We do not use personal information from your uploaded CSV files for any purpose other than generating QR codes as you have instructed. We do not sell, rent, or share this data with third parties for their marketing purposes.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We work with third-party service providers to help us operate our business, including:

• Payment processors (Stripe) for billing and payment processing
• Cloud hosting providers for data storage and processing
• Analytics providers to understand service usage
• Email service providers for communications

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or regulatory purposes.

QR codes you generate may be retained for the duration of your subscription or as needed to provide historical access through your account.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing your information
• Withdraw consent: Withdraw consent where we rely on it for processing

To exercise any of these rights, please contact us at hello@bulkqr.io. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Restricted access to personal information
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Data Processing Agreement (GDPR)

When you upload CSV files or other content containing personal information to generate QR codes, the following applies under GDPR:

10.1 Roles and Responsibilities

• You (Data Controller): You determine the purposes and means of processing personal data in your CSV uploads
• BulkQR.io (Data Processor): We process personal data solely on your instructions to generate QR codes

10.2 Our Commitments as Data Processor

We commit to:

• Process personal data only according to your documented instructions
• Ensure that persons authorized to process personal data are bound by confidentiality
• Implement appropriate technical and organizational security measures
• Not engage sub-processors without your general authorization
• Assist you in responding to data subject rights requests
• Assist you in ensuring compliance with GDPR obligations
• Delete or return all personal data after termination of services
• Make available all information necessary to demonstrate compliance

10.3 Your Obligations as Data Controller

You must:

• Ensure you have a lawful basis for processing personal data
• Obtain necessary consents from data subjects
• Provide appropriate privacy notices to data subjects
• Respond to data subject rights requests concerning data you control
• Ensure the accuracy of data you upload
• Comply with all applicable data protection laws

11. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our service after such changes constitutes your acceptance of the updated policy.

13. Cookie Policy

We use cookies and similar tracking technologies. For detailed information about our use of cookies, please see our Cookie Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: