QRJiffyPrivacy policy
QRJiffy collects only what a QR code service needs: your account email, the codes you save, and anonymous scan counts. We do not sell personal data, run advertising trackers, or store the IP address of anyone who scans a code.
Who we are
DPR Software Labs (OPC) Private Limited, trading as QRJiffy, is the data controller (Data Fiduciary under India’s Digital Personal Data Protection Act, 2023) for the data described here. Our registered address is Innov8 Mantri Commercio, Tower A, 5th Floor, Devarabisanahalli, Bangalore, Karnataka 560103, India.
What do we collect?
We collect account details, the QR codes you save, files you upload and payment records — nothing else about you.
| Data | When | Details |
|---|---|---|
| Account | You sign up | Email address and a salted scrypt hash of your password (we never store the password itself) |
| QR codes that open a web page | You download or save one | Destination link or page content, the name you give it, its design, and the short link |
| Uploaded files | You host a PDF, image, video or audio file | The file, its name, type and size |
| Payments | You buy Pro | Amount, currency, date, payment reference and Pro end date. Card details go to the payment provider and never reach us |
| Password reset | You ask for a reset link | A one-time token, stored only as a hash and valid for 1 hour |
WiFi, contact, text, SMS, call, email, event and crypto codes are generated in your browser and never reach our servers. Before you sign up, a code you are designing is kept in your own browser storage only, so it can be restored after sign-up.
What is recorded when someone scans a code?
Each scan of a short-link code records the time, device type, operating system, browser, language and country, and nothing that identifies the person. Country comes from our hosting network when it is available. The scanner’s IP address is used for a moment to block abuse and is never stored. Link previews from chat apps and bots are not counted.
Why do we use this data?
We use your data to run the service you signed up for, to keep it secure, and to meet legal obligations — never for advertising.
- To provide the service (performance of a contract): redirect your short links, host your files, show scan counts and enforce the Free allowance of 200 scans a month.
- To keep it secure (legitimate interests): rate-limit sign-ups and log-ins, stop malicious links, and send password-reset emails you request.
- To meet the law (legal obligation): keep payment records for tax and accounting.
How long do we keep it?
We keep your account, codes, files and scan history until you delete them or your account; payment records are kept as long as tax and accounting law requires. Log-in sessions expire after 30 days and reset tokens after 1 hour. Deleting your account from Account & plan removes every code, scan record and uploaded file immediately; printed codes then stop working.
How do we protect it?
Passwords are hashed with scrypt, session tokens are stored only as hashes, and all traffic is encrypted with HTTPS. Uploaded files are checked against their declared type, destination links must be http or https, and log-in and sign-up attempts are rate-limited. If a breach affects your data, we will notify you and the authorities as the law requires.
What are your rights?
You can access, correct, delete or export your data, and withdraw consent, by emailing hello@qrjiffy.com; we respond within 30 days. You can delete your account yourself at any time from Account & plan. These rights apply under India’s DPDP Act 2023 and, for people in the EU and UK, the GDPR, where you may also complain to your data protection authority.
Can children use QRJiffy?
QRJiffy accounts are for people aged 18 or over. We do not knowingly collect data from children; if you believe a child has created an account, email us and we will delete it.
How do you raise a complaint?
Write to our Grievance Officer at hello@qrjiffy.com or at DPR Software Labs (OPC) Private Limited, Innov8 Mantri Commercio, Tower A, 5th Floor, Devarabisanahalli, Bangalore, Karnataka 560103, India. We acknowledge complaints within 48 hours and resolve them within 30 days.
How will we tell you about changes?
We update this page and its date when our practices change, and email account holders about material changes before they take effect. Questions: hello@qrjiffy.com. See also our cookie policy and terms.