Privacy Policy

Who operates the service

The platform operator is the party identified in your order form or service agreement. Legal entity, address, contact channel, governing law, and regional notices must be completed and approved before production launch.

Information we handle

We handle account identity, business profile, policy acceptance, authentication events, session records, and security telemetry needed to operate and protect the service.

We also handle merchant card and batch records, fixed public short links, destination settings, manufacturing exports and programming/read-back records, merchant preassignment details, and business audit records.

The first release does not provide anonymous visitor analytics, per-tap records, or visitor profiles. Aggregate operational metrics for fixed routes describe service performance and health, not visitor statistics.

Why we use information

We use information to create and verify accounts, provision merchant access, deliver transactional email, maintain session security, prevent abuse, investigate reliability or security events, and meet documented service obligations.

Sharing and processors

Information may be processed by hosting, database, email-delivery, and abuse-prevention providers acting for the operator. A final processor list and any international transfer terms are a production-launch legal gate.

Retention and protection

Records are retained only for operational, contractual, legal, and security needs under the operator's approved retention schedule. Passwords are not stored in readable form, and administrator authentication uses additional controls.

Your choices and rights

You may request access, correction, deletion, restriction, objection, or portability where applicable. The verified request channel, response timing, and jurisdiction-specific wording must be supplied before launch.

Changes and contact

Material changes will receive a new policy version and appropriate notice. Do not publish this pre-launch policy as final legal text until operator identity, contact details, jurisdictions, processor terms, retention periods, and counsel approval are complete.