Last updated: December 26, 2025
1. Who We Are
Qredo is operated by a sole proprietor based in Portugal. The data controller for personal data processed on this website is available upon request via the contact details below.
2. What Data We Collect
We collect only the data necessary to operate the service:
Account Information
When you sign up using Clerk, we receive:
- Name
- Email address
- Profile image (if provided)
QR Code & Usage Data
- QR code configuration data
- QR scan statistics such as: device type, browser, and approximate location (country/city)
Technical & Security Data
- IP addresses
- Timestamps of actions
- User-agent / device metadata
This data is used strictly for analytics, fraud prevention, and platform security.
3. Why We Collect This Data
We process your data for the following purposes:
- Service Operation – enabling QR creation, redirection, and scan analytics
- Security – detecting abuse, fraud, or malicious activity
- Product Improvement – understanding feature usage to improve Qredo
- Legal Compliance – meeting regulatory obligations under EU law
4. Legal Basis for Processing
We process your personal data based on:
- Contractual necessity – to provide the service you request
- Legitimate interest – improving the platform and ensuring security
- Legal obligations – where required by law
5. Data Retention
- Account data is stored while your account remains active.
- QR scan analytics are retained for up to 24 months, after which identifying data is anonymized or deleted.
- Security logs (including IP addresses) are retained only as long as necessary for fraud prevention.
6. Your Rights under GDPR
You have the right to: Access your data, Correct inaccurate data, Delete your account and all associated data, Export your personal data, and Object to or restrict certain processing activities.
You can delete your account at any time from your account settings. For any additional requests, contact us using the details below.
7. Data Sharing
We do not sell or rent your data. We may share limited data with:
- Clerk – for authentication services
- Vercel Analytics – for anonymous usage statistics
All processors are GDPR-compliant.