Privacy policy

Who controls your data

Sławomir Radzymiński Consulting, at ul. Wizjonerów 7 lok. 199, 31-356 Kraków, Poland, is the controller of personal data processed by VividQR. You can contact us at slawomir.radzyminski@gmail.com.

What we collect and why

• Account and sign-in: email address, name or profile details you provide through Clerk, and an account identifier. If you choose Google sign-in, we receive the basic profile and email information needed to authenticate you. We do not request access to your Gmail or Google Drive.
• QR codes: the destination URLs you enter, generated short links, payment status, and timestamps. We use these to create, serve, and let you edit your codes.
• Payments: Stripe processes the payment. We keep the Checkout and payment identifiers needed to activate a code, handle support, and reconcile payments. VividQR does not store card numbers.
• Visits and scans: our hosting providers may process IP addresses, request details, and device information in security and operational logs. A scan goes directly through our redirect to the destination chosen by the code owner. We do not build scan profiles or show an advertising interstitial.

Legal basis

We process account, QR, and payment data to provide the service you request (GDPR Article 6(1)(b)). We keep information required for tax and accounting duties (Article 6(1)(c)). We use limited technical logs and security information to protect the service and investigate abuse (Article 6(1)(f), legitimate interests). Optional website analytics runs only with your consent (Article 6(1)(a)); you can withdraw it at any time through Cookie settings in the footer.

Service providers and transfers

Clerk provides authentication, Convex stores QR records, Stripe processes payments, and Vercel hosts the website and redirect service. Google is involved if you choose Google sign-in or allow optional website analytics. These providers process data for their respective functions and may process it outside the European Economic Area under applicable transfer safeguards. The destination website reached after a scan is operated by its own owner and has its own privacy practices.

How long data stays

We keep account and QR records while you use the service, or until you ask us to close your account, subject to any legal need to retain limited records. Payment and transaction records are kept for the period required by Polish tax and accounting law. Operational logs are retained according to the hosting provider's limited retention settings and only for security or troubleshooting. Contact us if you want a specific record removed.

Optional website analytics and cookies

With your permission, Google Analytics measures visits to VividQR's public pages, including the page viewed, preview editing and continuation actions, selected design, clicks to related products, a fixed campaign label and general device, browser, and approximate location information. We do not send your QR destinations, dashboard pages, payment identifiers, or scan redirects to Analytics. Google Analytics may set first-party cookies such as _ga to recognize visits. We load its tag only after you accept; rejecting analytics leaves it off. You can change your choice through Cookie settings in the footer. Learn how Google processes data from partner sites.

Clerk and our hosting providers use separate cookies or similar storage needed for sign-in, session security, and normal site operation. The public preview stores your destination and design in this tab’s session storage to carry them through sign-in; it removes that draft after creating your account code. Campaign labels are saved only after analytics consent. VividQR does not run advertising cookies or a separate scan analytics service.

Your choices and rights

You can ask to access, correct, delete, restrict, or receive your personal data, and object to processing based on legitimate interests. You may also complain to Poland's data protection authority (UODO). Email us to exercise these rights; we may need to confirm that the account belongs to you.

Changes

We may update this policy when the service or providers change. The updated date above shows the current version. We will notify account holders of material changes when practical.