Privacy Policy

This Privacy Policy explains how WaslChat QR ("we", "us") collects, uses, and protects information when you use our QR code platform (the "Service").

1. Information We Collect

• Account information — your name, email address, and password (stored hashed). If you sign in with Google, we receive your basic profile and verified email.
• Content you create — the QR codes you generate and the destinations, text, images, or files you configure for them.
• Scan analytics — when your QR codes are scanned, we record aggregate data such as scan counts, approximate location (country/city), device/OS type, and timestamps. This is used to provide your analytics.
• Usage & technical data — log data, IP address, and cookies necessary to operate the Service and keep you signed in.

2. Payment Information

Payments are processed by Paddle.com, our Merchant of Record. Paddle collects and handles your payment details directly. We do not receive or store your full card number. We receive limited billing metadata (such as plan, transaction status, and country) needed to manage your subscription. See Paddle's Privacy Policy.

3. How We Use Your Information

• To provide, maintain, and improve the Service;
• To generate and serve your QR codes and their analytics;
• To manage your account, subscription, and support requests;
• To secure the Service and prevent abuse;
• To comply with legal obligations.

4. Sharing & Sub-processors

We do not sell your personal data. We share data only with service providers that help us run the Service:

• Paddle — payment processing (Merchant of Record).
• Hosting — our server infrastructure (Hetzner).
• Cloudflare — DNS, CDN, and security.

We may also disclose data where required by law.

5. Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use advertising cookies.

6. Data Retention

We retain account and content data while your account is active. If you delete your account, we remove your personal data and QR content within a reasonable period, except where we must retain records to meet legal or accounting obligations.

7. Your Rights

You may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, email [email protected]. You can also delete your account at any time from your settings.

8. Security

We use HTTPS/TLS encryption, hashed passwords, and access controls to protect your data. No method of transmission or storage is completely secure, but we take reasonable measures to safeguard your information.

9. International Transfers

Your data may be processed on servers located outside your country. Where this occurs, we rely on appropriate safeguards to protect your information.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect their personal data.

11. Changes

We may update this Policy; material changes will be posted here with a revised effective date.

12. Contact

Questions or requests: [email protected] or WhatsApp +965 4100 8348.