Privacy Policy
Effective Date: July 21, 2026
1. Introduction
NG QRCode ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services at https://ngqrcode.com.
This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (IT Act) of India.
2. Data Controller
3. Data We Collect via Google OAuth
When you sign in to NG QRCode using your Google account, we request access to the following information only:
- •Email Address — Used to uniquely identify your account and communicate with you
- •Display Name — Used to personalize your experience in the dashboard
- •Profile Picture — Used as your avatar in the NG QRCode interface
We do NOT request, store, or use any other Google account data. We never access your Google Drive, Gmail, Calendar, or any other Google services.
4. Additional Data We Collect
4.1 QR Code Content Data
When you create QR codes, we store:
- • QR code artwork and metadata (ID, creation timestamp)
- • Destination URL or content (what the QR code redirects to)
- • AI generation prompt (the text you use to create artwork)
- • Content type (URL, PDF, contact card, SMS, email, etc.)
- • Scan count and scan analytics
4.2 Billing & Subscription Data
If you purchase a subscription, we collect and store:
- • Plan information (Starter/Pro, monthly/annual)
- • Subscription status and billing dates
- • Payment method (last 4 digits of card, brand)
- • Billing history and transaction records
4.3 Analytics Data
We track user behavior to improve our service. Analytics data is sanitized and anonymized — sensitive information like passwords, API keys, and full URLs are masked before storage.
- • Page views and navigation flows
- • Feature usage patterns
- • Error logs (without sensitive content)
- • QR code generation success rates
- • Scan analytics by time, location, and device
4.4 Contact Form Data
When you submit our contact support form, we collect your name, email, subject, message, and a CAPTCHA token for verification.
5. Third-Party Data Processors
We share data with the following trusted service providers:
Supabase
Authentication and data storage. Stores: user profiles, QR code data, subscription info.
Privacy: supabase.com/privacy
PostHog
Product analytics. Tracks: user behavior, feature usage, anonymized events.
Privacy: posthog.com/privacy
Dodo Payments
Payment processing. Stores: billing information, subscription data, payment history.
Payment processor for recurring subscriptions.
Cloudflare
Infrastructure and bot protection. Includes: Turnstile CAPTCHA, CDN, DDoS protection.
Privacy: cloudflare.com/privacy
Google OAuth
Sign-in provider. We receive: email, name, profile picture only. No additional data is shared.
Privacy: policies.google.com/privacy
6. Data Retention
- Account Data: Retained while your account is active. Upon account deletion, all personal data is removed within 30 days.
- QR Code Data: Retained as long as your subscription is active or as per your preference. You can delete individual QR codes or your entire library at any time.
- Analytics Data: Aggregated analytics are retained for 12 months. Event logs older than 90 days are deleted.
- Billing Records: Retained for 7 years as required by Indian tax law.
7. Your Rights Under DPDP Act 2023
As an individual in India, you have the following rights regarding your personal data:
- ✓Right to Access: You can request a copy of all personal data we hold about you.
- ✓Right to Correction: You can request corrections to inaccurate or incomplete personal data.
- ✓Right to Deletion: You can request deletion of your personal data (subject to legal obligations).
- ✓Right to Data Portability: You can request your data in a portable format.
- ✓Right to Opt-Out: You can withdraw consent for analytics and non-essential data processing.
To exercise any of these rights, contact us at hello@ngqrcode.com. We will respond within 30 days.
8. Security Measures
We implement industry-standard security measures to protect your data:
- • End-to-end encryption for sensitive data (passwords, payment info)
- • HTTPS/TLS encryption for all data in transit
- • Regular security audits and vulnerability assessments
- • Access controls and role-based permissions
- • DDoS protection via Cloudflare
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or by posting the updated policy on our website with an updated "Effective Date." Your continued use of NG QRCode after such changes constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us:
By using NG QRCode, you agree to this Privacy Policy. Please also review our Terms of Service.