QR Sensei is a product of Regent Media Group, LLC (“QR Sensei”, “we”, “us”). This policy explains what information we collect when you use qr-sensei.com, our app and the QR codes, Digital Business Cards and pages our customers create, how we use it, and the choices you have.
There are two kinds of people this covers. Customers are people who create a QR Sensei account. Visitors are people who scan a QR code or open a page that one of our customers made. For visitor information, our customer decides what to collect and how to use it, and we process it on their behalf.
Information we collect from customers
- Account details: your name, email address and password (stored only as a secure hash by our authentication provider), or your Google account’s name and email if you sign in with Google.
- Workspace and team details: workspace and team names, logos, the people you invite and their roles.
- Content you create: QR code names and destinations, Digital Business Card and page content (such as names, titles, phone numbers, addresses, social links and photos), folders, and files you upload such as logos, images, PDFs and audio.
- Billing details: your plan, billing period and subscription status. Card details are collected and stored by Stripe, not by us. We only see the card brand, last four digits and expiry if Stripe shares them.
- Integrations: if you connect HubSpot, we store the connection’s access tokens (encrypted) and your HubSpot account ID so we can send your leads there.
- Support and contact: what you send us through our contact form or by email.
Information we collect when someone scans a code
When a visitor scans a QR code or opens a page made with QR Sensei, we record the scan so our customer can see their analytics:
- The date and time, the code scanned and the web address it was scanned on.
- Approximate location (country, region and city) estimated from the visitor’s network by our hosting provider.
- Device type, operating system and browser, and the referring page if there is one.
- An anonymous visitor key used to estimate unique visitors. It is a one-way hash of the visitor’s IP address and browser details combined with a secret that changes every month. We do not store visitors’ IP addresses, and the key can’t be turned back into one.
If a visitor chooses to fill in a lead form on a Digital Business Card, we collect what they enter (such as name, email, phone and a note) and share it with the customer who owns the card, by email and in their account. If that customer has connected HubSpot, the lead is also sent to their HubSpot account.
How we use information
- To provide the service: creating and redirecting QR codes, hosting pages, showing analytics, and delivering leads to customers.
- To run your account: signing you in, managing teams, billing through Stripe and sending account emails (for example password resets, team invitations, lead notifications and plan reminders).
- To keep the service secure and reliable: preventing abuse and spam, rate limiting, and diagnosing problems.
- To support you when you contact us.
- To meet legal obligations.
We do not sell personal information, and we do not use it for advertising.
Service providers we use
We share information only with providers that help us run QR Sensei, and only as needed for their part:
- Supabase: database, authentication and file storage.
- Netlify: hosting for our website and app.
- Cloudflare: QR code redirects, custom domains, security and network services.
- Stripe: payments and subscription billing.
- Resend: sending account and notification emails.
- Google: “Continue with Google” sign-in (if you use it) and web fonts.
- HubSpot: only if a customer connects it, to receive that customer’s leads.
We may also disclose information if required by law, to protect the rights, safety or property of QR Sensei, our customers or others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to the information.
Cookies
We use a small number of cookies that the service needs to work. We don’t use advertising or cross-site tracking cookies.
- Sign-in cookies keep you logged in.
- Workspace (
qs_ws) remembers which workspace you were using. - Time zone (
qs_tz) shows analytics and dates in your local time. - HubSpot connection (
qs_hubspot_state) protects the HubSpot sign-in step and lasts a few minutes.
Scanning a QR code or viewing a customer’s page does not set cookies.
How long we keep information
- Account information and content are kept while your account is open.
- Scan records and leads are kept while the workspace they belong to exists, so customers can see their history.
- If a paid plan ends, we keep your codes and data. Nothing is deleted because a plan changes.
- When an account or workspace is deleted, its codes, scans, leads and uploaded files are deleted from our live systems. Backups held by our providers expire on their normal schedule.
- Billing records are kept as long as tax and accounting law requires.
Your choices and rights
- You can view and update your account details, content and settings in the app at any time, and turn off lead notification emails in Settings.
- You can ask us for a copy of your personal information, to correct it, or to delete your account by contacting us.
- Depending on where you live, you may have additional rights, such as to object to or restrict certain processing. We will honor requests as required by applicable law.
- If you are a visitor and want information removed from a customer’s account (for example a lead you submitted), please contact that business directly. If you can’t reach them, contact us and we will help.
Security
We protect information with encryption in transit, access controls that keep each workspace’s data separate, encrypted storage of integration tokens, and limited staff access. No service can guarantee perfect security, but we work to protect your information and will notify affected customers of a breach as required by law.
Children
QR Sensei is not directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, please contact us and we will delete it.
International users
We are based in the United States and process information in the United States and other countries where our service providers operate.
Changes to this policy
We may update this policy. If we make significant changes, we will let customers know by email or in the app before they take effect. The date at the top shows when it last changed.
Contact us
Regent Media Group, LLC, Jacksonville, Florida
Email: [email protected] · Contact form
