← Back to QRConnectMe

Privacy Policy

Effective Date: March 2026

1. Who We Are

QRConnectMe ("we," "us," "our") is a vehicle QR tag platform that enables anonymous communication between the public and vehicle owners. This policy explains how we collect, use, and protect your information when you use our mobile applications, web portals, and related services (collectively, the "Service").

2. Information We Collect

Information you provide directly:

• Account information: Phone number, name, city, and state (required for registration)
• Vehicle information: Vehicle registration number, make, model, and type
• Emergency contacts: Name, phone number, and relation of contacts you designate
• Shipping address: Address line, city, state, pincode (if you order a physical QR tag)

Information collected automatically:

• Scan logs: When someone scans a QR tag, we record the timestamp, action type (e.g., "wrong parking," "lights on"), and a one-way hash of the scanner's IP address. We do not store the actual IP address.
• Device information: Browser user-agent string (for scan logs)

Information we do NOT collect:

• Full IP addresses of scanners (we store only irreversible SHA-256 hashes)
• GPS/real-time location tracking
• Biometric data
• Payment card details (handled entirely by Razorpay — we never see or store card numbers)

3. How We Use Your Information

• Service operation: Linking QR tags to vehicles, sending scan notifications to owners, processing payments, crediting agent commissions
• Authentication: Sending OTP codes via SMS for secure login
• Communication: Sending transactional SMS (tag activation confirmations, payment receipts, payout notifications)
• Privacy protection: Masking vehicle registration numbers on the public scanner (e.g., KA-01-**-1234), enforcing Quiet Hours settings, and routing calls through anonymous proxy numbers
• Platform analytics: Aggregated, non-personally-identifiable statistics for system health monitoring

4. Privacy-First Design

QRConnectMe is engineered with privacy as a core principle:

• Masked identity: When someone scans a vehicle's QR tag, they see only a masked registration number — never the owner's name, phone number, or full plate
• Zero-knowledge logging: Scanner IP addresses are hashed before storage. We cannot reverse them to identify the scanner.
• Quiet Hours: Owners can set time windows during which scan notifications are suppressed
• Kill Switch: Owners can instantly deactivate a QR tag if a vehicle is lost or stolen
• Anonymous calling: Voice calls between scanners and owners are routed through proxy numbers — neither party sees the other's real phone number

5. Information Sharing

We share your information only in the following limited circumstances:

• Payment processor (Razorpay): Phone number and payment amount for processing transactions. Razorpay's privacy policy governs their use of this data.
• SMS provider (MSG91): Phone number for delivering OTP codes and transactional notifications
• Legal requirements: If required by law, court order, or government authority

6. Data Security

• All API communication is encrypted via HTTPS/TLS
• Authentication uses industry-standard JWT tokens
• OTP codes expire automatically after 5 minutes
• Sensitive configuration values are stored as environment variables, not in source code
• Role-based access control ensures users can only access data relevant to their role

7. Data Retention

• Account data: Retained while your account is active
• Scan logs: Retained for service operation and owner notification history
• Payment records: Retained as required by Indian tax and financial regulations
• OTP codes: Automatically deleted from our systems within 5 minutes of generation

8. Your Rights

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Grievance redressal: Raise concerns about our data practices

To exercise any of these rights, contact us using the details below.

9. Children's Privacy

QRConnectMe is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via SMS. The "Effective Date" at the top of this page indicates when this policy was last revised.

11. Contact Us