Summary in plain English
- We only collect what we need to run the service.
- We never sell your data or your customers' data.
- Customers leaving reviews share a name (optional), a phone number (optional, for rewards) and the answers they typed. That's it.
- No third-party advertising trackers. No cross-site profiling.
- Data lives in India unless you specifically opt for a different region.
What we collect from you (the business owner)
- Email address and a hashed password for sign-in.
- Business name, category, address, phone, GSTIN (optional), country.
- Subscription metadata from Razorpay (status, plan, payment id) — never card numbers.
- Product usage events (page views inside the dashboard) for debugging.
What we collect from your customers (the reviewer)
- The answers they type in the 2–3 review questions.
- The language they pick.
- An optional name and phone number, only if they choose to claim a reward.
- A timestamp and the QR they scanned, so you can attribute the review to the right outlet.
We do not collect device fingerprints, GPS coordinates,
or anything from the customer's social profiles.
Where your data lives
Production data is stored in India. Backups are encrypted at rest. Razorpay
handles all card data — we never see or store payment instruments.
Third parties we use
- Razorpay — subscription billing & tax invoicing.
- OpenRouter / OpenAI — generates the review draft from the customer's answers. Prompts contain no personally identifying information beyond what the customer typed.
- Google Maps Places API — only used to validate the URL you paste; we resolve a Place ID once and store it.
Cookies
We use a small number of strictly-necessary cookies — your session, your
language preference, and an onboarding draft. No analytics cookies, no
advertising cookies, no third-party trackers.
Your rights
- Access & export. Email labs@kraftpixel.com with the email on file and we'll export everything we have within 7 business days.
- Deletion. Cancel your subscription and email us — we'll permanently delete your data within 30 days, including any backups.
- Corrections. Most fields are editable in your dashboard. For anything you can't change yourself, email us.
Children
SuperQR is not directed at anyone under 18 and we do not knowingly collect
data from children.
Changes to this policy
We'll notify account holders by email at least 14 days before any
material change.
Contact
For privacy questions or data requests, email
labs@kraftpixel.com.