QRLinkSpot

Privacy Notice

Last updated: May 1, 2026

1. Who we are

QRLinkSpot is operated by Junior Rivas (“we”, “us”, “our”). For all personal data you provide to or that is collected through QRLinkSpot, Junior Rivas acts as the data controller.

2. Personal data we collect

We collect the following categories of personal data:

  • Account data: email address, login credentials, display name, username.
  • Profile content: bio, avatar emoji, links you add, theme and QR customization choices.
  • Support communications: messages you send us.
  • Usage and telemetry: which pages you view, when you log in, basic device and browser information.
  • Visitor analytics for your public page: aggregate counts of page views, QR scans, and link clicks. We do not store visitor IP addresses or build profiles of your visitors.
  • Payment-related data: when you subscribe, our payment provider Paddle collects billing details directly from you. We receive only the information needed to manage your subscription (e.g. customer ID, plan, status, billing period).

3. How we use your data and our legal basis

  • To create and operate your account and provide the Service — performance of a contract.
  • To process subscriptions and manage entitlements — performance of a contract.
  • To respond to support requests — performance of a contract / legitimate interests.
  • To monitor for abuse, fraud, and security incidents — legitimate interests.
  • To improve the Service (analytics, debugging) — legitimate interests.
  • To send service-related emails (e.g. billing notifications, account changes) — performance of a contract / legal obligation.
  • To send marketing emails, where applicable — consent, which you can withdraw at any time.

4. Who we share data with

  • Paddle.com — our Merchant of Record. Paddle handles checkout, payments, tax, invoicing, subscription billing, and refund processing on our behalf.
  • Hosting and infrastructure providers that store and serve QRLinkSpot (database, file storage, edge functions).
  • Email and support tooling used to communicate with you.
  • Professional advisers (legal, accounting), where necessary.
  • Authorities, where required by law or to protect rights, property, or safety.

We do not sell your personal data.

5. International transfers

Your personal data may be processed in countries outside your own, including by our service providers. Where such transfers happen from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymize it. You can ask us to delete your account at any time.

7. Your rights

Depending on your location, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • restrict or object to certain processing;
  • request a portable copy of your data;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local data protection authority.

To exercise these rights, contact us through your QRLinkSpot account. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and secure authentication. No system is 100% secure, but we work to keep your data safe.

9. Cookies

We use a small number of strictly necessary cookies and similar technologies to keep you signed in, remember your preferences, and operate the Service securely. We do not use advertising cookies. Where we use analytics cookies to understand how the Service is used, we do so on the basis of your consent or legitimate interests, depending on your jurisdiction.

10. Children

QRLinkSpot is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can remove it.

11. Changes to this notice

We may update this Privacy Notice from time to time. The date at the top reflects the latest version. We will notify you of material changes through the Service.

12. Contact

For privacy questions, contact Junior Rivas through your QRLinkSpot account. For billing-related data handled by Paddle, see Paddle's Privacy Notice. See also our Terms of Service and Refund Policy.