QR-Nexus

Privacy Policy

Last updated: 29 October 2026

This policy explains what data QR-Nexus (https://qrnexus.in), operated by Ranit Kalita, Guwahati, Assam, India, collects and why. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

1. Codes you make without an account

Static QR codes are generated entirely in your browser. The content you type — website links, UPI IDs, Wi-Fi passwords, contact details — is not sent to our servers.

2. Data we collect

  • Account: your email address and an encrypted password (handled by Google Firebase Authentication).
  • Saved codes: the names, destinations, designs and logos of codes you save to your dashboard.
  • Scan statistics: when someone scans a dynamic code we record the time, country, device type (mobile/desktop/tablet) and browser name. We do not store the scanner's IP address, exact location or identity.
  • Payments: processed by Razorpay. We receive your subscription status and ID; we never see or store your card, UPI or bank details.

3. How we use data

  • To run your account, redirect your dynamic codes and show your analytics.
  • To process subscriptions and send service emails (password resets, billing notices).
  • To prevent abuse and keep the service secure.

We do not sell your personal data and we do not show third-party advertising.

4. Service providers

We share data only with providers needed to run the service:

  • Google Firebase (authentication and database, region asia-south1, Mumbai)
  • Cloudflare (website hosting and QR redirects)
  • Razorpay (payments)

5. Cookies and storage

We use your browser's local storage to keep you signed in, remember your theme and cache your dashboard. We do not use advertising or tracking cookies.

6. How long we keep data

  • Account and saved codes: until you delete them or ask us to delete your account.
  • Scan statistics: up to 13 months.
  • Billing records: as long as Indian tax law requires.

7. Your rights

You can ask to see, correct or delete your personal data, or withdraw consent, by emailing [email protected]. We reply within 30 days.

8. Security

Data is encrypted in transit (HTTPS). Access rules ensure each account can only read its own codes and analytics.

9. Children

The service is not intended for children under 18 without a parent or guardian's consent.

10. Grievance officer

Ranit Kalita, Guwahati, Assam, India — [email protected]. We acknowledge complaints within 48 hours and resolve them within 30 days.

11. Changes

We will post any changes on this page and update the date above.