Privacy Policy

1. What we collect

From shop owners:

• Name, mobile number and email address, used to sign in with one-time codes.
• Shop details: name, address, city, location on the map, phone, hours and prices.
• Plan and payment records: plan, amount, UPI transaction ID (UTR) and the payment screenshot you send. We never see your UPI PIN, card or bank login.
• Login sessions: device type, browser and IP address, so you can see and sign out of your devices.

From customers sending files to a shop:

• Your name, and your mobile number and a note if you add them.
• The files you upload and your print choices (copies, colour, pages).
• Your IP address, briefly, only to stop spam and repeated uploads. It is not stored with your job.

2. Why we use it

• To run the service: sign you in, deliver files to the shop, show job status.
• To send one-time codes and important account messages by email and WhatsApp.
• To check payments and keep plan records.
• To keep the service secure and stop misuse.
• To meet legal duties, such as tax records or lawful requests from authorities.

We do not sell your data, show ads, or use advertising or tracking cookies.

3. Who can see it

• The shop you send files to sees your name, contact details, note and files, to print your job. No other shop sees them.
• Our administrators can see account, shop and payment details to run the service. They cannot open customers' files.
• Service providers that work for us: our hosting provider, our email provider (to send codes), and our WhatsApp messaging provider (to send codes to your mobile). They may use the data only to provide that service.
• Authorities, when Indian law requires us to share it.

4. How long we keep it

• Uploaded files: deleted automatically when the shop marks the job done or rejected, and at the latest 24 hours after upload.
• Job details (name, contact, token, status, page count) stay in the shop's job history while the shop's account exists.
• Owner accounts, with their shops, jobs, plan history and payment screenshots, are kept until the account is deleted, then removed. A short record that the account was deleted is kept for security.
• One-time codes expire after 5 minutes. Login sessions end after 30 days without use.

5. How we protect it

• No passwords to steal: you sign in with one-time codes.
• Login cookies cannot be read by scripts on the page.
• Uploaded files are never public; only the shop owner's login can open them.
• Secrets such as messaging tokens are stored encrypted.
• Connections use HTTPS.

6. Cookies and browser storage

We use only the cookies needed to keep you signed in. Your browser also remembers small preferences, such as dark mode, the selected shop and job alert sound, on your own device. There are no analytics or advertising cookies.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how it is used;
• correct or update it (owners can change name, mobile and email in Settings);
• ask us to erase it, by deleting your account;
• withdraw consent, which may mean we can no longer provide the service;
• nominate someone to act for you, and complain to our Grievance Officer.

Write to support@qrcopy.in. Customers who want a job removed sooner can also ask the shop to reject it, which deletes the files at once. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

8. Children

Shop owner accounts are for adults (18+). Customers under 18 should send files with a parent's or guardian's permission.

9. Changes to this policy

We may update this policy. The date at the top shows the latest version; for significant changes we tell account holders in the app or by email.

Contact and grievances

QrCopy
Rajkot, Gujarat 360002
Email: support@qrcopy.in

Grievance Officer: [Name of grievance officer], reachable at the email above. We reply to complaints within 15 days and resolve them within 30 days of receiving them.