DynaQR ("we", "us", "our") is a New Zealand business that operates the DynaQR QR code service. This policy explains what data we collect, how we use it, and your rights.
What we collect
Account data
When you create an account, we collect your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google. Payment information is collected and processed by Stripe. We do not store your card details.
Workspace content
We store the codes, destinations, designs, bio pages, lead forms and settings you create. This is used to run your codes and pages.
Scan data
When someone scans one of your codes, we record the time, approximate location (country, region and city), device, operating system, browser and language. We use it to show you analytics. We do not store IP addresses, and scanning a code sets no cookies.
Lead form entries
When someone submits one of your lead forms, we store the details they enter for you. You are the data controller for these entries, and we process them only to provide the service to you. If you submitted a form, contact the business that ran it about your data.
How we use your data
- To provide the DynaQR service
- To process payments via Stripe
- To send service emails, such as account notices, lead notifications and the reports you set up
- To check destinations for phishing and malware, and prevent abuse
We do not sell data, and we do not use it for advertising.
Google sign-in
If you sign in with Google, we ask Google only for your name, email address and profile picture. We use them to create your account, sign you in and show your name and picture in the app. We don't request access to your Gmail, Google Drive, contacts or any other Google data.
We don't share the information we receive from Google with anyone, and we don't use it for advertising or to train AI models. You can remove DynaQR's access at any time in your Google account settings, and deleting your DynaQR account deletes this information. Our use of information received from Google follows the Google API Services User Data Policy, including the Limited Use requirements.
Data sharing
We share data only with providers that help us run the service: hosting and infrastructure, payment processing (Stripe), email delivery, sign-in with Google (if you choose it), security checks that detect phishing and malware, and website analytics (Google Analytics and Cloudflare Web Analytics) to see how people use our site. Services you connect yourself, such as Google Analytics or a webhook, receive the data you send them.
Where data is stored
Our providers store data outside New Zealand, mainly in the United States. We take reasonable steps to make sure it is protected by safeguards comparable to the NZ Privacy Act 2020. For data from the EU or UK, we rely on our providers' standard contractual clauses.
Data retention
- Account data: retained while your account is active, and deleted when you delete your account. Backups are replaced within 30 days.
- Workspace content and scan data: retained for the life of the workspace, and deleted with it
- Lead form entries: retained until the form owner deletes them, or until the retention period they set
- Billing records: retained for as long as the law requires
Cookies
We use cookies that DynaQR needs to work, such as keeping you signed in and remembering your theme, language and sidebar settings. Google Analytics also sets cookies so we can see how people use our website. We do not use advertising cookies.
Your rights
Under the NZ Privacy Act 2020 and GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Object to processing
Contact us at [email protected] to exercise any of these rights.
If you are not satisfied with our response, you have the right to lodge a complaint with the New Zealand Office of the Privacy Commissioner.
Contact
DynaQR, a New Zealand business
Email: [email protected]