Privacy Policy

    Privacy Policy – JustGenQR

    Last Updated: 15-09-2026

    ---

    1. Introduction

    Welcome to JustGenQR, operated by CCL Digital LLP, 1101, Unitech Arcadia, Sector 49, Gurugram, Haryana 122018, India.

    This Privacy Policy explains how we collect, use, and protect information when you use our QR code platform — the website, dashboard, analytics, email reports, agent (MCP) integration, and API.

    JustGenQR is free for everyone: the Business plan costs ₹0 and includes every feature. Enterprise is a custom, contract-based plan. We do not fund the free platform by selling your data.

    By using JustGenQR, you agree to this Privacy Policy.

    ---

    2. Information We Collect

    ### A. Information You Provide

  1. Email address and name (on sign-up, or via Google sign-in)
  2. Profile details and workspace/brand settings (workspace name, logo, brand colour, custom domain)
  3. QR code content you enter (destination URLs, vCard, Wi-Fi, text and other payloads)
  4. Labels, campaigns, tags and UTM parameters you add
  5. Passwords you set on protected QR codes (stored only as a salted one-way hash, never in readable form)
  6. Messages you send us through the contact or Enterprise enquiry forms
  7. Billing details only if an Enterprise agreement requires invoicing

    8. ### B. Data Collected When a QR Code Is Scanned

  8. Scan date and time
  9. Approximate location (country, region, city) derived from IP; the IP address itself is stored only as an irreversible hash
  10. Device type (mobile, desktop, tablet), browser and operating system
  11. Referrer and UTM parameters, where available
  12. Whether the scan was served, blocked by expiry, or blocked by password protection

    13. ### C. Usage & Security Data

  13. QR creation, edit and deletion activity
  14. Workspace and team activity logs
  15. API request logs and per-key usage counts
  16. Failed unlock attempts on password-protected QR codes (hashed IP only), used for rate limiting
  17. Email delivery logs for transactional and report emails

    18. ---

    3. How We Use Your Information

  18. Provide QR code generation, dynamic redirects and management
  19. Serve scan tracking, analytics dashboards and weekly email reports (you can turn reports off in settings)
  20. Enforce QR access control and expiry rules you configure
  21. Operate team workspaces, invitations and role-based access
  22. Monitor API usage, apply fair-use rate limits and prevent abuse
  23. Respond to your support and sales enquiries
  24. Improve platform performance, reliability and features

    25. We do not sell or rent your personal data, and we do not use your QR destinations or scan data for advertising.

    ---

    4. QR Code Tracking & Analytics

    Scan analytics are aggregated and non-identifying: we do not collect names, phone numbers, precise GPS location, or account identities of the people scanning your codes, and we do not place tracking cookies on scanners.

    If you use JustGenQR codes commercially or in public spaces, you are the controller of that campaign data and are responsible for complying with applicable privacy and consent laws in your region.

    ---

    5. Cookies & Analytics Tools

    We use:

  25. Essential cookies / local storage to keep you signed in and remember preferences
  26. Google Analytics 4 for aggregated website usage statistics

    27. You can control or disable cookies in your browser settings; essential cookies are required for sign-in to work.

    ---

    6. Data Sharing & Processors

    We do not sell or rent personal data. We share data only with the service providers needed to run the platform, and only for that purpose:

  27. Cloud hosting, database, authentication and serverless functions
  28. Transactional email delivery
  29. Google Analytics (aggregated website analytics)
  30. Google, if you choose Google sign-in
  31. Payment processing, only where an Enterprise invoice requires it

    32. We may also disclose data to comply with a legal obligation, or to protect the rights, safety and security of users and the platform.

    ---

    7. Data Retention

  32. Account, workspace and QR data: retained while your account is active
  33. Scan analytics: retained so your historical reporting stays complete
  34. Security, email and API logs: retained for a limited period for abuse prevention and troubleshooting

    35. You may delete individual QR codes at any time (deletion is permanent) or request full account deletion, after which we remove your personal data except where law requires us to keep records.

    ---

    8. Data Security

  35. Encryption in transit, and encrypted storage at rest
  36. Row-level access controls so users and workspaces can only reach their own data
  37. Passwords and API keys stored only as one-way hashes
  38. IP addresses stored only as hashes
  39. Access monitoring and structured audit logging

    40. No system is completely secure, and we cannot guarantee absolute security.

    ---

    9. API & Agent (MCP) Access

    If you use our API or connect an AI agent:

  40. You are responsible for keeping your API key or connected session secure
  41. Requests are logged for performance, quota and abuse prevention
  42. Agent integrations act only on the QR codes of the signed-in account that authorised them
  43. Excessive or abusive usage may be rate-limited or restricted

    44. ---

    10. Your Rights

    Depending on where you live, you may have the right to:

  44. Access a copy of your data
  45. Correct or delete your data
  46. Export your QR and scan data (available as CSV/PDF in the dashboard)
  47. Withdraw consent or object to certain processing
  48. Complain to your local data protection authority

    49. To exercise these rights, email hello@crisscrosslab.com from your registered address.

    ---

    11. Third-Party Links & Destinations

    QR codes point to destinations chosen by their creator, and our site may link to third-party services. We do not control and are not responsible for the privacy practices or content of those destinations.

    ---

    12. Children's Privacy

    JustGenQR is not intended for individuals under 18, or under the minimum age in your region. We do not knowingly collect data from children.

    ---

    13. International Transfers

    Our infrastructure and processors may store or process data in locations outside your country. Where required, transfers are protected by appropriate safeguards and contractual commitments.

    ---

    14. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be reflected here with an updated "Last Updated" date, and where appropriate we will notify you by email.

    ---

    15. Contact Us

  49. Company: CCL Digital LLP
  50. Address: 1101, Unitech Arcadia, Sector 49, Gurugram, Haryana 122018, India
  51. Email: hello@crisscrosslab.com
  52. Phone: +91 93116 22116
  53. Website: https://justgenqr.com

    54. ---

    16. Our Commitment

    At JustGenQR we believe in:

  54. Transparency about what we collect and why
  55. Minimal data collection, hashed IPs and no scanner tracking cookies
  56. Every feature free and accessible, without compromising user privacy