Privacy Policy

1. Who we are

Simply Automated QR (qr.simplyautomated.io) is run by Simply Automated. This policy explains what we collect when you use the site, why, and who processes it for us. Questions: support@simplyautomated.io.

2. QR codes made without an account

With JavaScript on, codes made with the generator on the home page are created in your browser, and what you type is not sent to us. Without JavaScript, link and text codes are made by our image API (see below).

If you open a link that carries the content in the web address (a home page link with ?data=, or the image API at /api/qr), the content is part of that address. We don't save it, but it appears in our host's standard request logs, and images from the API are cached by our host's CDN. Don't put passwords or other secrets in those links.

3. Your account

• Email address, to sign you in and send account emails (verification codes, password resets).
• Password, if you sign up with email. It is stored hashed by our sign-in provider; we never see it in plain text.
• Name and profile picture, if you sign in with Google.
• Session cookies, to keep you signed in.

4. Saved QR codes and scan counts

For each code you save we store its name, description, destination link, short link, the dates it was created and last changed, and a total scan count.

When someone opens a saved code's short link, we add one to that count and forward them. We don't store who scanned, their IP address, device, location or the time of each scan. To stop abuse, the visitor's IP address may be used for a short time to rate-limit requests; it is not stored with your code.

5. Payments

Pro is billed by Stripe. Stripe collects your card details; we never see or store them. We keep your Stripe customer and subscription IDs, your plan, its status and the end of the current billing period.

6. Logs and cookies

Our host keeps standard request logs (IP address, browser, requested address and time) for a limited period to run and secure the site. We use no analytics, advertising or tracking cookies, only the sign-in cookies above.

7. How we use it

To run the service: sign you in, store and serve your codes, show scan counts, bill Pro, answer support email, and prevent abuse. We don't sell your information or use it for advertising.

8. Who processes it for us

• Neon: database, and sign-in (Neon Auth), including account emails.
• Vercel: hosting, CDN and request logs.
• Stripe: payments for Pro.
• Google: sign-in, only if you choose "Sign in with Google".
• Upstash: rate limiting, which briefly processes IP addresses.

9. How long we keep it

• Saved codes: until you delete them or your account is deleted.
• Account data: until your account is deleted. Email us to delete it.
• Billing records: Stripe keeps them as payment and tax law requires.
• Request logs: kept by our host for a limited period, then deleted.

10. Your choices and rights

You can edit or delete your saved codes in the dashboard. To get a copy of your data, correct it, or delete your account, email support@simplyautomated.io. Depending on where you live (for example under the GDPR or the CCPA), you may also have the right to object to or restrict processing and to complain to a data protection authority.

11. Children

The service is not meant for children under 13, and we don't knowingly collect their information.

12. Changes

If we change this policy, we will update this page and the "Last updated" date.