Privacy Policy
PixQR (“we”, “us”) is a QR code service operated by Accel Fintech Pvt. Ltd. at https://pixqr.in. This policy explains what personal data we process, why, and the choices and rights you have. We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and process only the data we need to run PixQR.
1. Data we collect
| Data | When | Why |
|---|---|---|
| Name, email address, profile photo and Google account ID | When you sign in with Google | To create your account and keep you signed in. We never receive your Google password. |
| QR code content (links, contact details, texts, images and files you add) | When you save a QR code or upload a file | To generate your codes and host their pages |
| Scan statistics: time, device type, operating system, browser, approximate country and city | When someone scans a tracked code | To show the code’s owner how it performs |
| A one-way hash of the scanner’s IP address and browser | When someone scans a tracked code | To count unique scans and stop fake scan inflation. The original IP address is not stored. |
| Feedback ratings and comments | When someone uses a Feedback QR page | To show the responses to that code’s owner |
| Abuse reports, and your contact details if you choose to give them | When you report a QR code | To investigate and remove harmful content |
| Usage analytics | Only if you accept analytics cookies | To understand which features are used and improve PixQR |
Codes made with the free generator without signing in are created entirely in your browser. Their content is not sent to us.
2. How we use data
We use data to provide and secure the service, show you your QR codes and statistics, prevent fraud and abuse (including checking destinations against Google Safe Browsing), respond to support requests and meet legal obligations. We do not sell personal data, and we do not use the content of your QR codes for advertising.
3. Consent and legal basis
By signing in you consent to the processing described here for running your account. Analytics cookies are used only after you accept them. You can withdraw consent at any time by deleting your account or changing your cookie choice; this does not affect processing that happened before.
4. Who we share data with
- Hosting provider — our servers and database are hosted in data centres operated by our hosting provider.
- Google — for Sign in with Google; for Google Safe Browsing, which receives the destination links of tracked codes so they can be checked for phishing and malware; and for Google Analytics, only if you accept analytics cookies.
- Authorities — when required by Indian law or a valid legal order.
Anyone who scans a QR code sees the content its owner put on it. Do not put information in a QR code that you do not want the people who scan it to see.
5. How long we keep data
Account data and QR codes are kept while your account is active. When you delete your account, your profile, QR codes, scan statistics and feedback are deleted from our live database immediately and removed from backups within 30 days. Abuse reports are kept for up to 2 years to prevent repeat abuse.
6. Your rights
Under the DPDP Act you may:
- Access and export your data — use “Download my data” on the Account page.
- Correct your data — edit your QR codes at any time; your name and photo update from Google each time you sign in.
- Erase your data — use “Delete my account” on the Account page.
- Withdraw consent, nominate another person to exercise your rights, and raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.
7. Security
All traffic uses HTTPS. Sessions use secure, HTTP-only cookies, and session tokens are stored only as hashes. Password-protected QR codes store only salted hashes. Access to production systems is restricted to authorised staff, and backups are encrypted. No system is perfectly secure; if a breach affects your data we will notify you and the Data Protection Board as the law requires.
8. Cookies
| Cookie | Purpose | Type |
|---|---|---|
pq_sid | Keeps you signed in (30 days) | Essential |
pq_<code> | Remembers that you entered the password of a protected QR code (24 hours) | Essential |
| Google sign-in cookies | Set by Google when you use Sign in with Google | Essential, third party |
_ga, _ga_* | Google Analytics usage statistics | Optional — only after you accept |
9. Children
PixQR is meant for users aged 18 and over. We do not knowingly create accounts for children. If you believe a child has signed up, contact us and we will delete the account.
10. Changes
If we change this policy in a meaningful way, we will update the date above and tell signed-in users before the change takes effect.
11. Contact and grievances
Questions: support@pixqr.in
Grievance Officer, Accel Fintech Pvt. Ltd.: grievance@pixqr.in. We acknowledge grievances within 72 hours and aim to resolve them within 30 days.
Accel Fintech Pvt. Ltd., Gandhinagar, Gujarat, India.