Privacy Policy

1. Who is responsible for your data

Gifie Kft. is the data controller for the personal data described in this notice. If you have questions about this notice or wish to exercise your rights, contact us at hello@qrpogo.com.

2. Personal data we collect

• Account data: your name (or workspace name), email address, password (stored only as a secure hash), and authentication method (email or Google sign-in).
• Service content: the QR codes you create, including destinations, labels, projects, design settings, and team/workspace membership details.
• Scan data: aggregated, privacy-conscious scan events for dynamic QR codes — country, device type, operating system, browser, referrer and language. We do not store IP addresses or precise locations.
• Usage and technical data: information about how you use the Service, and basic technical logs needed to operate and secure it.
• Support data: messages you send us, including emails to hello@qrpogo.com.
• Cookie and consent data: your cookie/analytics choices, stored locally in your browser.

3. Why we use your data and on what legal basis

• To provide the Service (creating and managing your QR codes, redirects and analytics) — performance of our contract with you.
• To manage your account, subscriptions and billing — performance of our contract with you.
• To keep the Service secure, prevent abuse and fraud — our legitimate interests.
• To understand usage and improve the Service, including optional analytics — our legitimate interests, and consent where cookies require it.
• To communicate with you about your account and respond to support requests — performance of our contract, and our legitimate interests.
• To comply with legal obligations such as accounting and tax record-keeping — legal obligation.

4. Who we share data with

We share personal data only with the categories of recipients listed below, and only to the extent needed:

• Hosting and infrastructure providers that run the Service on our behalf.
• Paddle.com — our reseller and Merchant of Record. Paddle processes orders, payments, subscriptions, tax compliance and invoicing, and handles refund and billing support. Payment card details are collected and processed by Paddle, not by us.
• Service providers that help us operate the Service, such as email delivery and error-monitoring tools.
• Professional advisers (legal, accounting) where necessary.
• Authorities, where we are legally required to disclose data.

5. International data transfers

Our service providers may process data outside your country, including outside the European Economic Area. Where data leaves the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

We keep personal data only as long as necessary for the purposes described above: account and QR code data for as long as your account is active; billing records for the period required by accounting and tax law; scan analytics in aggregated form for as long as the related codes exist. When data is no longer needed, we delete or anonymise it.

7. Your rights

If you are in the EEA or the UK, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time (for example, for optional analytics cookies). You also have the right to lodge a complaint with your local supervisory authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

To exercise any of these rights, contact us at hello@qrpogo.com. We respond within one month.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and row-level security in our database so your data is only accessible to you and the team members you invite.

9. Cookies and similar technologies

The Service uses a small number of essential cookies and browser storage needed for sign-in and security. Optional analytics cookies are only set after you agree to them in the consent banner, and you can change your choice at any time. Google Consent Mode v2 is used so that analytics and advertising signals are withheld until you consent.

10. Changes to this notice

We may update this notice from time to time. We will publish the new version on this page with an updated “last updated” date, and notify you of material changes where appropriate.