PurpleQR is a product of SAASCAPES Software Private Limited, a company incorporated in India ("we", "us"), which is the data controller for purpleqr.com. This policy explains what personal data we collect, why, and the choices you have. It applies to account holders and to people who scan QR codes created with PurpleQR. Contact: support@purpleqr.com.

• Account details — name, email address, password (stored hashed), and, if you sign in with Google, your Google account ID and profile email.
• Content you create — QR code settings, uploaded files (PDF, images, audio), landing-page text, links and contact details you choose to publish.
• Billing — plan, invoices and payment status. Card details are handled by our payment provider and never reach our servers.
• Usage and support — log data, device/browser information, and messages you send us.

When a dynamic QR code is scanned, our redirect service records the time, the IP address (used to derive an approximate city/country and then not shown to the code owner), device type, operating system and browser. This is used to show scan statistics to the code owner and to protect the service from abuse. Static QR codes do not contact our servers when scanned.

• To provide and secure the Service, including hosting your pages and redirecting scans.
• To process payments, send receipts, trial and payment-failure notices, and respond to support requests.
• To send account emails such as email verification and password reset.
• To understand how the Service is used and to improve it.
• To comply with legal obligations and enforce our Terms.

We process data to perform our contract with you, for our legitimate interests (security, analytics, improvement), to meet legal obligations, and with your consent where required (for example, marketing emails, which you can opt out of at any time).

• Payment providers (for example Stripe or Dodo Payments) to process subscriptions.
• Email delivery (Amazon SES) to send transactional emails.
• Hosting providers that run our servers and store uploaded files.
• Google, only if you choose to sign in with Google.
• Authorities, where required by law.

We do not sell personal data.

Content you put on a hosted page (such as a Profile Card, Menu or Event page) is visible to anyone who scans the code or has the link. Do not publish information you do not want to be public.

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences. We do not use third-party advertising cookies. You can clear cookies in your browser; doing so will sign you out.

We keep account data for as long as your account exists. Scan statistics are kept while the related QR code exists. Uploaded files that are no longer referenced by any QR code are removed periodically. After an account is deleted we remove or anonymise personal data within 90 days, except where we must keep records (for example, invoices) by law.

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. You can update most details in the dashboard and delete your account from Settings. For anything else, email support@purpleqr.com.

Data is encrypted in transit (HTTPS). Passwords are stored using a one-way hash. Access to production systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed at children under 18 and we do not knowingly collect their data.

Our servers and providers may be located outside your country. Where required we use appropriate safeguards, such as standard contractual clauses.

We may update this policy from time to time. We will post the new version here and update the date above; material changes will be notified by email or in the dashboard.