ZetaQR

Trust & Privacy

Privacy Policy

Last updated: September 2026 • Effective globally

Our core privacy principle: no tracking cookies

When end-users scan a ZetaQR dynamic QR code, we do not place tracking cookies on their devices and we do not track personal identities across the web. Scan analytics are counted in aggregate, and we don't use cookies to track the people who scan.

1. Introduction

ZetaQR Inc. ("ZetaQR", "we", "us", or "our") provides dynamic QR campaign infrastructure, branded smart links, and landing page services. This Privacy Policy describes how we collect, use, and protect information when you visit our website, register for an account, or interact with QR codes powered by ZetaQR.

2. Information We Collect

A. Account & Customer Data

When you sign up for ZetaQR, we collect personal contact details such as your name, email address, password, company name, and billing information (processed via secure, PCI-DSS compliant third-party payment gateways).

B. QR Code Scan Data

When a physical QR code or smart link generated via ZetaQR is scanned or clicked, our edge servers temporarily process:

  • Timestamp of the scan
  • Coarse geographic location (country, region, and city derived from truncated IP headers)
  • User agent headers (device operating system such as iOS or Android, and browser family)
  • Referring URLs and custom UTM campaign parameters

Raw IP addresses are truncated or anonymized in memory and are never stored as raw personal identifiers in our persistent analytics logs.

C. Files and Contact Cards

Customers can upload files (such as PDF menus) and create contact cards that open when their codes are scanned. We store that content on behalf of the customer who created it. We don't collect any details from the people who scan beyond the scan data listed above.

ZetaQR's own scan analytics do not set tracking cookies. When a code sends someone to a customer's own website, that website's cookies and privacy policy apply there.

3. How We Use Information

We use collected information strictly to:

  • Provide, operate, and maintain our dynamic redirect network and campaign dashboards
  • Generate aggregated analytics reports for campaign owners (e.g. scan volume by city and hour)
  • Detect, prevent, and mitigate security threats, fraud, phishing, and abusive links
  • Process billing transactions and send critical account notifications

4. Data Security & Storage

We employ industry-standard organizational and technical safeguards. Data sent between your browser and our servers is encrypted with TLS. Stored data is encrypted at rest.

5. Your Data Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the right to:

  • Request access to the personal data we hold about your account
  • Request correction of inaccurate personal data
  • Request permanent erasure of your account and related campaign assets
  • Object to or restrict specific processing of your data
  • Export your campaign data in a portable structured format (CSV / JSON)

6. Contact Our Data Protection Officer

If you have questions regarding this Privacy Policy or wish to exercise your legal data rights, please contact our Data Protection Officer at:

ZetaQR Inc. — Legal & Privacy Compliance