QRPlus — Privacy Policy

*Last updated: 2026-08-23*

1. Who this policy covers

This policy applies to qrplus.com.au ("QRPlus," "we," "us"), operated by Printed Plus [ABN to confirm], trading as QRPlus (business name registration with ASIC pending as of this draft). It covers two groups of people differently:

• QRPlus customers — people who create an account, buy QR codes, or manage codes through our dashboard.
• Scanners — the public, who scan a QR code created by one of our customers. Scanners never interact with QRPlus directly and never create an account with us.

2. What we collect

From customers (account holders):

• Account details: name, email, password (stored hashed, never in plain text).
• Billing information, processed by our payment provider — we do not store full card numbers ourselves.
• The QR codes you create: their type, destination/content, design choices, and title.

From scanners (the public):

Every time someone scans a QRPlus code, we log:

• Timestamp of the scan.
• Device type (e.g. mobile, tablet, desktop) and browser, inferred from the scanning device's user agent.
• Rough location (city/region level, inferred from IP address — never precise GPS coordinates, and we do not ask for or access device location services).
• IP address, used momentarily to infer rough location and for basic abuse/rate-limit protection, per code.

We do not collect scanners' names, email addresses, or any other personally identifying information, and we never attempt to identify an individual scanner. Scan data is aggregated and shown to the QR code's owner (the customer) as counts, trends, and rough breakdowns — never as a personal profile of any one visitor.

3. Why we collect it

• To operate the core service — generating codes and redirecting scans to the destination our customer set.
• To provide the analytics our customers pay for (scan counts, timing, device, rough location).
• To protect the service from abuse (e.g. rate-limiting excessive requests from a single source).
• To bill subscriptions and one-time purchases.

We do not sell scan data or account data to third parties, and we do not use scan data for advertising or ad targeting.

4. How long we keep it

• Scan records are retained for as long as the associated QR code exists in an active or paused state. If a customer deletes a code, its historical scan records are deleted with it.
• Account data is retained for as long as the account is active, plus a reasonable period after cancellation in case of billing disputes or reactivation.
• Backups: the underlying database is backed up nightly (14-day rolling retention) and via periodic full-server snapshots, purely for disaster recovery — not for extending how long we otherwise use your data.

5. Cookies and sessions

The QRPlus dashboard uses a session cookie to keep you logged in (expires after 2 hours of inactivity). We do not use third-party advertising or tracking cookies. The public scan-redirect pages (what a scanner's phone actually loads) do not set cookies at all.

6. Your rights

Under the Australian Privacy Principles (Privacy Act 1988), you can:

• Ask what personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your account and associated data (subject to reasonable billing/record-keeping retention).

To make a request, contact support@qrplus.com.au.

7. Data storage and security

Data is stored on a server hosted in Australia (DigitalOcean, Sydney region). All traffic to and from the site is encrypted (HTTPS). Access to the underlying server and database is restricted to authorised administrators only.

8. Changes to this policy

We may update this policy as the service changes. Material changes will be reflected here with an updated "last updated" date; significant changes may also be communicated to account holders by email.

9. Contact

Questions about this policy or your data: support@qrplus.com.au.