Privacy Policy

We may collect the following categories of information:

• Account information, such as your name, email address, and authentication details.
• User-submitted content, including card titles, recipient names, uploaded images, and voice recordings.
• Usage and technical information, such as request logs, browser/device signals, and session data needed to operate and secure the service.
• Payment-related metadata from checkout flows, such as transaction status, checkout IDs, and related internal references. Payment card details are processed by Stripe and are not stored directly by QR Wishes.

• To create and manage accounts.
• To host and display personalized card experiences you create.
• To process one-time purchases and unlock paid features.
• To maintain service reliability, prevent abuse, and resolve support issues.
• To comply with legal obligations and enforce our terms.

We use service providers to operate QR Wishes, including:

• Supabase for authentication, database, and file storage.
• Stripe for payment processing and checkout operations.
• Infrastructure and hosting providers used to run the web application.

These providers process data on our behalf according to their own terms and privacy notices.

• Draft card records are scheduled for deletion after 3 days.
• Paid card records are scheduled for deletion after 365 days from payment date.
• When a card is deleted, related uploaded media is also removed from storage.
• Account and support records may be kept as needed for security, legal, and operational reasons.

We use reasonable technical and organizational safeguards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to request access, correction, deletion, or portability of your personal information. To submit a request, contact us using the details below.

We may update this Privacy Policy from time to time. Updates are effective when posted, and the Last updated date will be revised accordingly.

Legal entity: [TODO: Add legal company name]

Mailing address: [TODO: Add company mailing address]

Privacy contact: [TODO: Add privacy contact email]