Privacy Policy

1. Introduction

Welcome to QR Projukti (the "Service"), a SaaS product owned and operated by OnnoRokom Projukti Limited ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Our company is based in Bangladesh, and our Service is available to users globally. By using our Service, you agree to the collection and use of information in accordance with this policy.

Our Role: Controller and Processor

Under the General Data Protection Regulation (GDPR), it is important to understand our role:

Data Controller: We act as a Data Controller for the personal information of our registered users who create and manage QR codes. We determine the purposes and means of processing this data.

Data Processor: We act as a Data Processor for the information collected from end-users who scan the QR codes created by our users. We process this data on behalf of our users and according to their instructions.

2. Information We Collect

2.1. Information You Provide to Us

Account Data: When you register for an account, we collect your name, email address, phone number, and password.

Billing Data: To process payments for our subscription plans, we collect billing details like your name, organization name, billing address, and VAT/GST/Tax ID. Our third-party payment processors handle payment card information securely.

QR Code Content Data: We collect the information you voluntarily provide to create QR codes, such as website URLs, vCard details, text, social media links, PDF files, and other data you embed.

2.2. Information We Collect Automatically

Usage and Log Data: We automatically collect information when you interact with our Service, including your IP address, browser type, operating system, pages visited, time and date of access, and other diagnostic data.

Cookie Data: We use cookies and similar tracking technologies to track activity on our Service. This helps us understand how you use the site and improve your experience. You can manage your cookie preferences through your browser settings.

2.3. Information We Process for Our Users (End-User Data)

When an end-user scans a dynamic QR code created by one of our users, we collect the following information on behalf of our user:

Scan time and date.
IP address.
Device type and operating system.
General location (country and city) derived from the IP address.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the Service: To operate our platform, manage user accounts, and generate QR codes.
To Process Transactions: To manage subscriptions, process payments, and handle billing.
To Improve Our Service: To understand how users interact with our platform, analyze usage patterns, and develop new features.
For Communication: To send administrative information, service updates, security alerts, and respond to customer support inquiries.
For Marketing: To send you promotional materials and offers, from which you can opt-out at any time.

4. Legal Basis for Processing (for EEA Users)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information is as follows:

Performance of a Contract: To provide the Service you subscribed to.
Legitimate Interests: For service improvement, security, and marketing, where our interests are not overridden by your data protection rights.
Consent: Where you have given us explicit consent to use your information for a specific purpose.
Legal Obligation: To comply with applicable laws and legal processes.

5. How We Share and Disclose Information

We do not sell your personal data. We may share your information with:

Service Providers: Third-party vendors who provide services like payment processing, cloud hosting (e.g., AWS, Google Cloud), and analytics.
Legal Compliance: If required by law, we may disclose your information to public authorities.
Business Transfers: In connection with a merger, sale of company assets, or acquisition.

6. International Data Transfers

Our company is located in Bangladesh. Your information will be transferred to, stored, and processed in Bangladesh. Data protection laws in Bangladesh may differ from those in your jurisdiction. By using our Service, you consent to the transfer of your information to Bangladesh and its processing as described in this policy. We implement appropriate safeguards to protect your data during such transfers.

7. Data Security and Retention

We implement robust technical and organizational security measures to protect your data. We retain your personal data for as long as your account is active or as needed to provide you with the Service, comply with our legal obligations, and resolve disputes.

8. Your Data Protection Rights

The right to access, correct, or delete your personal information.
The right to data portability to receive your data in a machine-readable format.
The right to object to or restrict the processing of your data.
The right to withdraw consent at any time.
The right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact our Data Protection Officer.

9. Governing Law

This Privacy Policy and any disputes related to it shall be governed by and construed in accordance with the laws of Bangladesh.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect data from children.

11. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website and by updating the "Last Updated" date.