Privacy Policy
Last updated: May 19, 2026
This Privacy Policy explains how nomqr(“nomqr,” “we,” “us,” or “our”) handles personal information when you use our website, dashboard, billing, and hosted QR pages (the “Service”).
1. Who this applies to
- Account holders — business users who sign in to create and manage QR pages.
- Visitors — people who scan a QR code and view a public page, optionally change language, submit feedback, or interact with linked content.
2. Information we collect
Account and authentication. When you sign in (e.g. with Google), we receive identifiers such as your name, email address, and profile image as provided by the identity provider. We store account and subscription status in our database.
Content you provide. Page titles, block content (menus, text, links, images you upload), appearance settings, and optional feedback configuration. Images are stored on our hosting infrastructure.
Billing. Paid plans are handled by Stripe. We receive subscription and customer identifiers from Stripe; we do not store full payment card numbers on our servers.
Visitor interactions. If you enable feedback on a public page, visitors may submit ratings and comments you can view in the dashboard. If auto-translate is enabled (Pro and above), we may send page text to an AI translation provider to generate localized versions for visitors.
Technical data. We may collect cookies and similar data (e.g. region preference, session cookies for sign-in), IP address, browser type, and logs needed for security, debugging, and performance.
3. How we use information
- Provide, secure, and maintain the Service;
- Process subscriptions and send billing-related communications;
- Host and deliver your public QR pages to visitors;
- Offer optional translation and feedback features you turn on;
- Enforce our Terms, prevent abuse, and comply with law;
- Improve the product with aggregated or de-identified analytics where possible.
4. Legal bases (EEA/UK)
Where GDPR or similar laws apply, we rely on: performance of a contract (providing the Service), legitimate interests (security, improvement, fraud prevention), consent where required (e.g. non-essential cookies if we use them), and legal obligation.
5. Sharing with service providers
We use trusted processors who handle data only on our instructions, such as:
- Cloud hosting and database providers;
- Stripe (payments);
- Google (sign-in, when you choose it);
- AI translation services (when auto-translate is enabled);
- Email or infrastructure vendors as needed to operate the Service.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or sale of assets with appropriate safeguards.
6. Cookies and regional preferences
We use cookies to remember your sign-in session, store your preferred pricing region, and keep the Service working. You can control cookies through your browser settings; some features may not work if essential cookies are disabled.
7. Retention
We keep account and page data while your account is active and for a reasonable period afterward unless you delete content or close your account. Billing records may be retained as required for tax and accounting. Logs and backups are kept for limited periods for security and operations.
8. Security
We use administrative, technical, and organizational measures appropriate to the nature of the data we process. No method of transmission or storage is completely secure; please use a strong account and protect your credentials.
9. International transfers
Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. You can update much of your account information in the dashboard. To exercise other rights, contact us at the email below.
EEA/UK residents may lodge a complaint with a supervisory authority. California residents may have additional rights under the CCPA/CPRA; we do not sell personal information as defined by those laws.
11. Children
The Service is not directed at children under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data and we will delete it.
12. Account holders and visitor data
If you publish a QR page, you may be an independent controller of visitor data (for example feedback submissions). You are responsible for your own privacy notices and lawful bases when collecting visitor information. nomqr processes that data on your behalf to provide the features you enable.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post changes on this page and update the “Last updated” date. Material changes may be communicated by email or in-product notice where appropriate.
14. Contact
Privacy questions or requests: support@nomqr.com.
