← Back to QRConnectMe

Privacy Policy

Effective Date: August 2026  ·  Last revised: August 2026 (added scan-location collection — Section 2)

1. Who We Are

QRConnectMe ("we," "us," "our") is a vehicle QR tag platform that enables anonymous communication between the public and vehicle owners. This policy explains how we collect, use, and protect your information when you use our mobile applications, web portals, and related services (collectively, the "Service").

2. Information We Collect

Information you provide directly:

• Account information: Phone number, name, city, and state (required for registration)
• Vehicle information: Vehicle registration number, make, model, and type
• Emergency contacts: Name, phone number, and relation of contacts you designate
• Shipping address: Address line, city, state, pincode (if you order a physical QR tag)

Information collected automatically:

• Scan logs: When someone scans a QR tag, we record the timestamp, action type (e.g., "wrong parking," "lights on"), a one-way hash of the scanner's IP address, and the scanning device's location (see next item). We do not store the actual IP address.
• Scan location: The geographic location of the device used to scan a QR tag, as reported by that device's web browser at the moment of the scan. Sharing this location is required to complete a scan — the vehicle details and contact options do not load without it. We store the latitude, longitude, and the browser's own accuracy estimate alongside that scan record. We do not track location continuously or between scans, we do not collect any location from the owner's app, and we do not convert coordinates into street addresses.
• Device information: Browser user-agent string (for scan logs)

Information we do NOT collect:

• Full IP addresses of scanners (we store only irreversible SHA-256 hashes)
• Continuous or background location tracking — a scanner's location is captured only at the instant of a scan, never between scans, and never from the owner's app
• Biometric data
• Payment card details (handled entirely by Razorpay — we never see or store card numbers)

3. How We Use Your Information

• Service operation: Linking QR tags to vehicles, sending scan notifications to owners, processing payments, crediting agent commissions
• Authentication: Sending OTP codes via SMS for secure login
• Communication: Sending transactional SMS (tag activation confirmations, payment receipts, payout notifications)
• Privacy protection: Masking vehicle registration numbers on the public scanner (e.g., KA-01-**-1234), enforcing Quiet Hours settings, and routing calls through anonymous proxy numbers
• Scan location context: Showing a vehicle's owner (and our support team, when assisting the owner) the location of each scan of their tag, so they can understand where a parking issue, emergency, or other report came from
• Platform analytics: Aggregated, non-personally-identifiable statistics for system health monitoring

4. Privacy-First Design

QRConnectMe is engineered with privacy as a core principle:

• Masked identity: When someone scans a vehicle's QR tag, they see only a masked registration number — never the owner's name, phone number, or full plate
• Zero-knowledge logging: Scanner IP addresses are hashed before storage. We cannot reverse them to identify the scanner.
• Quiet Hours: Owners can set time windows during which scan notifications are suppressed
• Kill Switch: Owners can instantly deactivate a QR tag if a vehicle is lost or stolen
• Anonymous calling: Voice calls between scanners and owners are routed through proxy numbers — neither party sees the other's real phone number
• Location minimisation: A scanner's location is collected only at the moment of a scan, stored as a single coordinate pair with the scan record, and never converted to an address, enriched, or used to build a location history

5. Information Sharing

We share your information only in the following limited circumstances:

• Payment processor (Razorpay): Phone number and payment amount for processing transactions. Razorpay's privacy policy governs their use of this data.
• SMS provider (MSG91): Phone number for delivering OTP codes and transactional notifications
• Legal requirements: If required by law, court order, or government authority

6. Data Security

• All API communication is encrypted via HTTPS/TLS
• Authentication uses industry-standard JWT tokens
• OTP codes expire automatically after 5 minutes
• Sensitive configuration values are stored as environment variables, not in source code
• Role-based access control ensures users can only access data relevant to their role

7. Data Retention

• Account data: Retained while your account is active
• Scan logs: Retained for service operation and owner notification history, including the scan location stored with each record
• Payment records: Retained as required by Indian tax and financial regulations
• OTP codes: Automatically deleted from our systems within 5 minutes of generation

8. Your Rights

In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Grievance redressal: Raise concerns about our data practices

To exercise any of these rights, contact us using the details below.

9. Children's Privacy

QRConnectMe is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via SMS. The "Effective Date" at the top of this page indicates when this policy was last revised.

11. Contact Us