Privacy Policy: How Scanqur Handles Your Data

Scanqur is committed to protecting the privacy of its users. This Privacy Policy explains what data we collect when you use our platform, how we use it, and the rights you have over your information.

Information We Collect

When you create a Scanqur account, we collect your email address and an encrypted version of your password. When you configure your business profile, we store the details you provide: your business name, address, phone number, business type, opening hours, and logo URL. When you build your digital menu, we store the categories, products, prices, and descriptions you enter. We also collect standard server logs, including pages accessed, timestamps, and general browser and device information.

How We Use Your Data

Your data is used exclusively to operate and improve the Scanqur platform. Specifically, we use it to display your menu to customers who scan your QR code, to send transactional emails such as account confirmation and password reset messages, and to analyse aggregate, anonymised usage patterns to improve the service over time. We do not use your data for advertising, and we do not sell or rent your personal information to any third party under any circumstances.

Data Sharing and Third-Party Services

We do not share your personal data with third parties except as follows. Running Scanqur relies on a small number of processors, each handling only what its task requires: Supabase, our database, authentication and file storage provider, where your account, your business and your menu are stored; Resend, which delivers the transactional emails described above; DeepL, which translates your menu into the languages you choose to offer; Google, which hosts the website, provides the AI features you choose to use, and, only if you accept analytics cookies, measures aggregate usage; Cloudflare, when you serve your menu on your own domain; and PayPal, if you subscribe to the Pro plan, which handles the payment so that we never see or store your card details. Each of them processes data solely to deliver the Scanqur service and is governed by its own privacy policy. We may also disclose data when required by applicable law, regulation, or legal process, or to protect the rights, property, or safety of Scanqur, our users, or others. The AI features deserve a word of their own, because they send content to Google: scanning a photographed menu sends that photo, writing a product description or a social post sends what you have typed and a few facts about your business, and the support assistant sends your question, the recent messages of that conversation and the settings of the business you are asking about. It never sends your customers' personal data. These features only run when you use them.

Data Retention

We retain your account data, business profile, and menu content for as long as your account is active. If you choose to delete your account via the Settings page, all associated personal data is permanently and irreversibly deleted from our systems within 30 days. Aggregate and anonymised analytics data that cannot be linked to any individual may be retained indefinitely. Your conversations with the support assistant are kept with your account so that you can find them again, and are deleted with it.

Your Rights (GDPR)

If you are based in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR). You may request a copy of the personal data we hold about you, ask us to correct any inaccurate information, request that we delete your data, or ask for a portable export of your data. You may also object to or request a restriction on certain types of processing. To exercise any of these rights, contact us at contact@scanqur.com. We will respond within 30 days.

Security

We apply industry-standard security measures to protect your data. Passwords are stored using strong one-way cryptographic hashing and are never readable by anyone, including us. Access to our production database is restricted to authorised personnel. While we make every reasonable effort to secure your information, no online service can guarantee absolute security. We encourage you to use a strong, unique password for your account.

Customers of businesses (optional identity)

On the menu of a business on the Pro plan, a guest may choose to confirm their email address with a one-time code, to keep their loyalty stamps, orders and bookings on every device. We then keep that address, the date it was confirmed, and their choice about receiving the business's offers, which is separate and off by default. This identity belongs to one business only and is never shared with another Scanqur business. The business acts as data controller and Scanqur as processor. The code is stored in hashed form and expires after 10 minutes. The guest can at any time sign out, withdraw consent to offers, or permanently erase their data from the business's menu; the order history is then kept by the business with no link to them.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or the way your data is handled, please contact us at contact@scanqur.com. We aim to respond to all privacy-related enquiries within 30 days.

Back to home Terms of Service: Terms of Service