Privacy Policy
QR Service is operated by BEIZ Studio, Dubai, United Arab Emirates. This policy explains what we store, why, for how long, and who helps us process it. It covers both account holders and people who scan a code created with the service.
1. What we store
- Account. Your email address, your name if you provide one, and a hash of your password. The password itself is never stored. If you sign in with Google or Apple, we store the provider's account identifier instead of a password.
- Workspace content. Your links and their destinations, names, labels, folders, campaigns, QR designs, link-in-bio pages, the history of destination changes, team members and invitations, and API keys (stored as hashes).
- Scan events. For every scan of a code: the time, the country, region and city reported by our hosting network, device type, operating system, browser, the referring site, and whether the request looked automated. We do not store the raw IP address. It is turned into a salted hash that lets us count unique visitors and cannot be used to look a person up.
- Page events. Views and clicks on link-in-bio pages: the time, the clicked link, the country, the same salted IP hash as scan events and a bot flag.
2. Why we use it
We use this data to redirect scans, show analytics to the owner of a code, manage team access, send service emails (email confirmation, password reset, invitations), and protect the service from abuse. We do not sell personal data, we do not build advertising profiles, and we do not use scan data for our own marketing.
3. How long we keep it
- Scan and page events are deleted automatically 730 days after they are recorded.
- Account and workspace content are kept while the account exists. You can delete your account from Settings in the dashboard; this removes your personal data and, if you are the workspace owner, the workspace with its links and analytics. If the dashboard is unavailable to you, write to hello@beizstudio.com and we will do it within 30 days.
- Backups. A daily backup protects your links against data loss. Data deleted from the live service can remain in earlier backup files until they are purged; backups are used only for disaster recovery.
4. Who processes data for us
We rely on a small number of providers. Each receives only what it needs for its task.
- Vercel — hosting and the network that serves redirects and pages; it derives the country and city of a scan.
- Neon — the managed PostgreSQL database where accounts, links and events are stored.
- Resend — delivery of service emails.
- GitHub — a private repository that holds the daily off-platform backup. Password hashes, API key hashes and invitation tokens are excluded from backups.
- Google Fonts — serves the typeface used on our pages; your browser requests the font files from Google.
- jsDelivr and cdnjs — content delivery networks that serve open-source scripts used by the dashboard and the QR editor.
Some of these providers process data outside the United Arab Emirates. We use their standard data-processing terms.
5. Cookies and local storage
We set one persistent cookie: an HttpOnly session cookie that keeps you signed in to the dashboard. If you sign in with Google or Apple, a second short-lived HttpOnly cookie protects that sign-in handshake and expires within minutes. Your light or dark theme preference is saved in your browser's localStorage. We use no advertising or cross-site tracking cookies. People who scan a code receive no cookie from us.
6. Your rights
You can see and correct your account data in the dashboard, export your links as CSV or JSON, and delete your account. You may also ask us for a copy of your personal data, ask us to correct or erase it, or object to a particular use, by writing to hello@beizstudio.com. We answer within 30 days. If you scanned a code and have a question about it, the business that published the code decides where it leads; we can help you reach them.
7. Security
Traffic is encrypted with TLS. Passwords and API keys are stored only as hashes. Every workspace is isolated from the others, and access inside a workspace is limited to the people its owner has invited.
8. Changes
When this policy changes we update the date above, and we announce material changes by email or in the dashboard before they take effect.
9. Contact
BEIZ Studio, Dubai, United Arab Emirates. Privacy questions and data requests: hello@beizstudio.com.