QRQR Link Manager
☰
HomeFeaturesPlansFAQ
EnglishEN
العربيةAREnglishEN
Sign inCreate membership
QR

Privacy Policy

This policy explains the information processed by the platform, why it is used and your rights.

This initial text requires confirmation of operational details before final approval.

The operator The administration of “QR Link Manager” operates the QR and link-management platform. Privacy enquiries may be sent to aa@aa.com.

  • Member accounts: name, email, a one-way password hash, account status and plan settings.
  • Saved member links: destinations, short codes, folders, categories, campaigns, expiry settings and scan indicators.
  • Saved guest links: destination, short code, state, creation, expiry and planned deletion times; a network-derived identifier enforces daily guest quotas.
  • Direct QR does not create a stored short-link record, though ordinary website and hosting access records may still exist.

Member link events may record the scan time, device category, browser, operating system and referrer where available. Raw IP addresses and complete user-agent strings are not stored in the scan-event table; administrative audit and hosting logs may nonetheless contain IP addresses and technical metadata. Necessary cookies and sessions support authentication, security and language selection.

Information supports registration and optional email verification, link creation and redirection, quota enforcement, misuse prevention, permitted analytics, operational backups and audit logs, and records of agreement to published policy revisions.

Processing required for a requested link or account supports delivery of the requested service, subject to the legal grounds applicable to each purpose. Consent is used when required and collected validly under configured controls and applicable law. Disabling a guest consent checkbox does not remove technically necessary processing.

  • Saved guest links: validity and the deletion grace period follow the effective guest settings when created; redirects stop at expiry, and a due cleanup task (Cron) removes eligible records.
  • Member links: expiry and automatic-deletion behavior depend on plan and link-level settings; an expired member link may stop redirecting without automatic deletion of its record.
  • Scan events, activity records and consent evidence: retention varies with their purpose, configured controls and applicable legal obligations.
  • Backups: copies may temporarily contain records deleted from the live database until backup rotation; deletion from the primary database is not necessarily immediate removal from every backup.

Log and backup retention periods follow the service operator’s implemented schedule and applicable legal duties; these may differ from link expiry periods.

Hosting, mail delivery and other approved technical providers may process data necessary to operate the platform. Opening a QR destination may disclose normal visit information to the external site, which has its own privacy practices. Not every provider or destination receives every member record. Information about relevant technical service providers is available from the operator where applicable law requires it.

Actual hosting and processing location: [hosting/processing country]. Additional processing by authorised service providers may be subject to applicable cross-border transfer requirements and safeguards.

The platform uses access controls, session protection, request validation and operational safeguards designed to reduce unauthorized access. The operator is responsible for reviewing appropriate system updates, privileges, backups and error logs. No online service can eliminate every security risk. Do not share passwords, password reset links or private link management tokens. Personal data incidents are assessed and notified to relevant authorities or individuals where applicable legal notification thresholds are met.

Subject to applicable law and its exceptions, you may request information about the personal data processed and why, access it, obtain a readable copy, correct or complete inaccurate information, request destruction after its purpose ends, and withdraw consent where consent is the legal basis. Some records may be retained where a separate legal duty or valid ground applies. Requests and complaints should be sent to aa@aa.com. Appropriate identity verification may be necessary to protect account information. You may refer a complaint to the competent regulator where the law allows.

Material changes are published as revised documents. The system records acceptance and revision identifiers when consent is required; earlier acceptance evidence is not rewritten merely because a new policy is published. Review this policy when data handling, providers or retention practices change.

Operator: The administration of “QR Link Manager”. Privacy email: aa@aa.com. Processing location: [hosting/processing country].

Published revision: 1