Privacy policy

The controller of personal data processed through this service is the operator of QR-Universe. For privacy requests call or WhatsApp +90 541 323 00 02. We answer in Azerbaijani, Turkish, English and Russian.

If you browse a merchant’s catalog, that merchant is responsible for the product content they publish. We host that content on their behalf.

Account data: name, email, password hash (never stored in plain text), company profile and catalog content you upload, and the time you accepted the terms.

Usage data: QR scan events (time, language, optional device type), product-sheet opens, and a random visitor id used only to count people currently viewing a catalog.

Technical data: a session cookie after login, language and theme preference, and cookie-consent choice. Short-lived server logs may include IP address for security.

Abuse reports from catalog guests: the catalog, the reason chosen, optional details, a hashed network identifier and user-agent. Used only to review violations.

To run your workspace, show your catalog to guests, count real scans, keep you signed in, remember language and theme, and to answer support.

To review reports of prohibited catalogs and enforce the terms.

We do not sell personal data. We do not run advertising networks or third-party marketing pixels.

Infrastructure processors (PostgreSQL and object storage hosted by Neon) store data solely to run the product.

We disclose data if required by law or to protect the service against abuse. We do not share catalogs with other merchants.

Account and catalog data stay while your workspace is active. Deleting the workspace in Settings removes the company, catalog, QR codes, scans and the owner login.

Anonymous online-presence pings expire automatically in under a minute.

Abuse reports are kept as long as needed to investigate and protect the service.

You may access, correct or delete your workspace from Settings, or contact us at the number above for a copy of your account data.

You may lodge a complaint with a data-protection authority in your country of residence.

The service is intended for businesses. We do not knowingly collect data from children under 16.

We will update this page when our practices change and revise the date above.