Trust

What we do to keep your codes running, your data safe, and ourselves honest.

Uptime

  • β†’Scan redirects - the path every printed code resolves through - run on a dedicated, isolated service we treat as our most critical surface. Dashboard problems don't affect scan redirects.
  • β†’App dashboard - target 99.5% uptime.
  • β†’Uptime goal. Business includes a 99.5% uptime goal on monitoring. We publish product and incident updates as the platform evolves.
  • β†’A public status page is coming; incident history will live there.

Data & privacy

  • β†’What we collect: your account name and email, billing details (handled by Stripe), and scan metadata (device, browser, truncated/derived location from IP).
  • β†’What we don't collect: the identity of the people scanning your codes, or the contents of the pages you point them to.
  • β†’Where it lives: in the EU. The app, database, and file storage run on AWS in an EU region; the marketing site runs on Cloudflare.
  • β†’Your rights (GDPR): export, correct, or delete your data - just ask. You can export your data as CSV anytime and delete your workspace yourself.
  • β†’Data Processing Agreement available on request.

Subprocessors

ProviderPurposeRegion
StripePayments & invoicingEU/global
Amazon Web Services (AWS)App hosting, database & object storage (S3)EU
ResendTransactional emailUS/global (SCCs)
CloudflareMarketing site + CDN/securityEU edge
Google Analytics + ad pixels (Google, Meta)Marketing-site analytics (consent-gated)-
CrispLive chat started by the visitorEU (France)

Each is covered by its own DPA. Analytics sets cookies only after consent (running cookieless before that), and chat loads only when you start a conversation.

Security

Only what we can actually stand behind:

  • β†’TLS on all endpoints
  • β†’Passwords hashed (bcrypt)
  • β†’Production access limited to named people
  • β†’Regular dependency updates
  • β†’Daily encrypted backups
  • β†’No real customer data in development environments

Please do not put protected health information or other highly sensitive personal data in QR code destinations.

What happens to your codes if you cancel

Your codes keep redirecting until the end of the period you've paid for, then pause until you resubscribe. We keep your codes and scan history - nothing is deleted on cancellation. Cancelled by accident? Email us within 30 days and we'll put it right.

Security questions

Have a specific security or privacy question? Email [email protected] with β€œsecurity” in the subject and we will route it to the right person.