Privacy Policy

1. Introduction

AQRHub ("we", "us", "our") operates aqrhub.com. This policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

Account data

• Email address
• First name (optional)
• Password (hashed, never stored in plain text)

Payment data

Payments are processed by Stripe. AQRHub does not store credit card numbers. Stripe's privacy policy applies to payment data.

Tag orders

When you order a smart tag (a pet tag or a luggage tag), we collect your name, email address, shipping address and any notes you add, to process, ship and support your order. We share your name and shipping address with the shipping carrier (USPS) to deliver it. We keep order records for as long as we need them for the order, customer support, accounting and legal requirements.

QR code scan data

When someone scans your QR code we collect and store the scanner's IP address, along with device type, browser, operating system, referrer, and timestamp. We use the IP address to derive an approximate location (country, region, city) through a third-party IP geolocation service (IPinfo), and to help distinguish real scans from bots and automated traffic in your analytics. An IP address can be considered personal data under some privacy laws.

Scan analytics are reported in aggregate. AQRHub does not attempt to identify the individual person who scanned a QR code.

When an app or website only loads a page to show a link preview, we do not count or record it as a scan.

Information visitors share on a digital business card

On Starter and Pro plans, a digital business card can show a Share your info button. A visitor who uses it chooses to send their name, phone number, email address, company and a short message to the card’s owner. We send it to the card owner by email and keep it in the owner’s account so they can see it, add their own notes and download it. Only the card owner can see it in their account. AQRHub staff may access it only to provide support, fix problems or prevent abuse. We do not use it for anything else, and we do not sell it or share it with advertisers.

We keep this information for as long as the card owner keeps that card. The card owner can delete a lead at any time. When the owner deletes the card, it is deleted with it once the card’s 7-day restore period ends. When the owner deletes their account, it is deleted right away. If you shared your info on a card and want it removed, email support@aqrhub.com and we will delete it. The card owner may also have their own copy, such as the email we sent them, and is responsible for it.

Emails visitors share on a Multi-link page

On Starter and Pro plans, a Multi-link page can show an Email signup form. A visitor who uses it chooses to send their email address to the page’s owner, and must tick a box that says they agree to receive emails from that page. We keep the email address, the form they used, the time they signed up and the words they agreed to in the owner’s account, so the owner can see it, download it and delete it. Only the page owner can see it in their account. AQRHub does not send any emails to these addresses. AQRHub staff may access it only to provide support, fix problems or prevent abuse. We do not use it for anything else, and we do not sell it or share it with advertisers.

The page owner decides how to use the emails they collect and is responsible for having the visitor’s consent and for following the laws that apply to them. We keep this information for as long as the page owner keeps that page. The page owner can delete a signup at any time. When the owner deletes the page, it is deleted with it once the page’s 7-day restore period ends. When the owner deletes their account, it is deleted right away. If you signed up on a page and want your email removed, ask the page owner, or email support@aqrhub.com and we will delete it. The page owner may also have their own copy, such as a file they downloaded, and is responsible for it.

Videos and music on a Multi-link page

A Multi-link page can show a video or song from YouTube, Vimeo, TikTok, Spotify, Apple Music or SoundCloud. Nothing is loaded from those sites until a visitor taps play. When they do, the player comes from that site, which may collect information under its own privacy policy. We count the tap for the page owner’s stats like a link tap.

Link previews

When someone shares a link to a page made with AQRHub (such as a digital business card, Multi-link page, PDF, Note or tag page), apps like Messages, WhatsApp, Slack or social sites may show a preview. The preview uses only what the page already shows to anyone who opens it, such as a name, a job title, a title or a photo the owner added. It never includes a phone number, email address or street address. A paused page shows a general preview with nothing about its owner. The preview picture is made by AQRHub with any hidden photo information, such as location, removed. A preview being shown is not counted as a scan.

QR code content

We store the content you encode into your QR codes, including destination URLs and any data you place in them (for example vCard, WiFi, SMS, or email payloads). Destination URLs may be checked against Google Safe Browsing to protect users from malicious links.

Log and abuse-prevention data

To protect the Service we log certain events, such as contact-form submissions and blocked URLs, together with the sender's IP address and the submitted content. We use reCAPTCHA and Cloudflare Turnstile to detect bots on our forms.

Usage data

We use Google Analytics to understand how visitors use AQRHub, such as which pages are visited, how long people stay, the type of device and browser, and general geographic region. This information is aggregated and helps us improve the product. We do not use Google Analytics to identify individual visitors.

First-party product analytics

We also record limited first-party product events, such as when a QR code is created or when certain features are used. These events help us improve AQRHub, troubleshoot issues, and understand which features are most valuable. This information is not sold or shared with advertisers.

Authentication

If you sign in with Google we receive your name, email address, and profile picture from Google.

3. How We Use Your Data

• To provide and improve the Service
• To send transactional emails (welcome, password reset, billing notifications)
• To display scan analytics in your dashboard
• We do not sell your personal information or share it with advertisers

4. Data Retention

We retain your account data for as long as your account is active. QR code scan data, including scanner IP addresses and derived location, is retained for as long as the associated QR code exists so that it can power your analytics dashboard. We do not currently apply a fixed expiry to scan data, so it is retained indefinitely by default until the QR code or account is deleted. Information visitors share on a digital business card is kept as described under “Information visitors share on a digital business card” above. Unverified, abandoned free accounts are automatically deleted after 7 days. You may request deletion of your account and data by emailing support@aqrhub.com

5. Cookies

AQRHub uses cookies in two categories:

• Strictly necessary cookies that keep you signed in and protect against cross-site request forgery. These are set by AQRHub itself and cannot be turned off without breaking core functionality of the site.
• Analytics cookies set by Google Analytics on our public pages for the analytics purposes described under Usage data above.

Most browsers let you block or delete cookies from the browser settings. Blocking analytics cookies will not affect your ability to use the Service.

6. Third Party Services and Subprocessors

We share data with the following third party services in order to operate AQRHub. Each receives only the data needed for its function:

• Stripe: payment processing. Receives your billing details; card numbers are handled by Stripe and never stored by AQRHub (stripe.com/privacy).
• Render: cloud hosting and database. Stores the application data described in this policy.
• Cloudflare: content delivery, security, image and file storage (R2), and custom-domain routing for our servers. As our edge network it processes visitor requests, including IP addresses.
• IPinfo: IP geolocation. Receives scanner IP addresses to return approximate location (ipinfo.io/privacy-policy).
• Google Analytics: site usage analytics on our public pages, as described under Usage data above.
• Google OAuth: optional sign-in method. Provides us your name, email address, and profile picture when you choose to sign in with Google.
• Google Safe Browsing: URL safety checks. Receives QR code destination URLs to screen for malicious links.
• Google reCAPTCHA and Cloudflare Turnstile: bot and abuse protection on our forms. Receive request and token data, including IP address.
• AWS SES (Amazon Simple Email Service): sends transactional email (verification, password reset, billing, and support messages, lead notifications to digital business card owners, and the card-back emails sent to visitors who ask for them) from support@aqrhub.com. Receives recipient email addresses and message content.

We do not sell your personal information or share it with advertisers.

7. Children's Privacy

AQRHub is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@aqrhub.com

9. Security

We use HTTPS encryption and store passwords using secure hashing. We take reasonable measures to protect your data but cannot guarantee absolute security.

10. Changes to This Policy

We may update this policy at any time. We will notify users of significant changes by email.

11. Contact

Questions about this policy? Email us at support@aqrhub.com