Privacy Policy

ModeQR ("we", "us", or "our") operates the website modeqr.com. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our service, you agree to this policy.

1. Data We Collect

• Email address — collected when you register or sign in.
• QR code history — we store the QR codes you generate while signed in so you can access them from your dashboard.
• Payment information — billing details are processed by Stripe and are never stored on our servers. We only receive a subscription status and customer ID.
• Usage data — basic analytics such as page visits and feature interactions to improve the product.
• Cookies — session cookies required for authentication and preference cookies to remember your settings (see Section 4).

2. How We Use Your Data

• To provide, maintain, and improve the ModeQR service.
• To authenticate your account and keep it secure.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (e.g., email confirmation, password reset). We do not send unsolicited marketing emails.
• To comply with legal obligations.

3. Data Storage — Supabase

Your account data and QR history are stored on Supabase, a managed PostgreSQL platform. Data is encrypted at rest and in transit. Supabase infrastructure is hosted on AWS and complies with SOC 2 Type II standards. We do not sell or share your data with third parties except as described in this policy.

4. Cookies

We use the following types of cookies:

• Essential cookies — required for login sessions and security. Cannot be disabled.
• Preference cookies — remember your theme or language choices.
• Analytics cookies — anonymous usage data to help us improve the product. You may opt out via your browser settings.

5. Stripe Payment Processing

All payment transactions are handled by Stripe, Inc. We never see or store your full card number, CVV, or bank details. Stripe is PCI-DSS Level 1 certified. By subscribing to a paid plan you also agree to Stripe's Privacy Policy.

6. Your Rights

Depending on your location you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to update inaccurate information.
• Deletion — request that we delete your account and associated data. You can also delete your account directly from the dashboard.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing where we rely on legitimate interests.

To exercise any of these rights, email us at support@modeqr.com. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, personal data is purged within 30 days, except where retention is required by law (e.g., financial records for 7 years).

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the site at least 14 days before they take effect.