Privacy policy

1. Who we are

Dynamic QR Pro is operated by Blue Networks OÜ, Vase 5, 10155 Tallinn, Estonia. We are the data controller for the personal data described here.

Privacy contact / Data Protection Officer: Reio Rajaveer — privacy@dynamicqrpro.com.

2. What we collect

• →Account data: your name, email, password (hashed), and billing details (handled by Stripe — we don't store card numbers).
• →Workspace data: workspace name, team members you invite, the codes you create, and the destinations you set.
• →Scan metadata (about people who scan your codes): timestamp, device and browser type, and a rough location derived from a truncated IP address.
• →Product usage: pages visited and actions taken in the app, to improve it.
• →Cookies: see the Cookies policy.

3. What we don't collect

• →The identity or personal details of the people who scan your codes.
• →The contents of the destinations you link to.

4. Why we process it (GDPR legal basis)

• →Performance of a contract — to provide the service you pay for.
• →Legitimate interest — product analytics, security, and fraud prevention.
• →Consent — marketing emails and optional cookies (analytics, ads, chat).
• →Legal obligation — tax, accounting, and lawful requests.

5. Subprocessors

Each operates under its own Data Processing Agreement. A current DPA list is available on request.

6. How long we keep it

• →Account data: while your account is active, plus 30 days after closure.
• →Scan data: retained while your subscription is active.
• →Aggregate, non-identifying analytics: retained indefinitely.
• →Backups: rotated on a regular cycle.

7. How we protect it

See our security overview on the Trust page. In short: TLS in transit, hashed passwords, encrypted daily backups, and production access limited to named people.

8. Your rights

You can access and export your data, correct it, delete it, restrict or object to processing, and withdraw consent. To exercise any of these, email privacy@dynamicqrpro.com. You also have the right to complain to your supervisory authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon).

9. Children

The service isn't intended for children under 16, and we don't knowingly collect their data.

10. International transfers

Your data is stored in the EU. Where a subprocessor processes data outside the EU, we rely on Standard Contractual Clauses or an adequacy decision.

11. Changes

If we make material changes, we'll email account holders and post a notice here, keeping prior versions on record.