Privacy Policy

Last updated: March 6, 2026

1. Overview

PulseQRC (“we,” “us,” or “our”) is a real-time QR feedback platform built in Minnesota. We are committed to protecting your privacy and being transparent about how we handle data.

2. What We Collect

From end-users who scan a QR code:

  • Star rating (1–5)
  • Optional free-text comment
  • QR code location identifier and timestamp

We do not collect names, email addresses, phone numbers, device IDs, IP addresses, or any other personally identifiable information from people who scan QR codes. Feedback is completely anonymous.

From business account holders:

  • Email address (for authentication)
  • Business name
  • Phone number (optional, for SMS alerts)
  • Google Review URL (optional)

3. How We Use Your Data

  • Display aggregated feedback on your admin dashboard
  • Send SMS alerts for critical feedback (if configured)
  • Improve the PulseQRC product and service

We never sell, rent, or share your data with third parties for advertising purposes.

4. Data Storage & Security

All data is stored in Supabase-hosted PostgreSQL databases with encryption at rest and in transit (TLS 1.2+). Our API runs on Cloudflare Workers, benefiting from Cloudflare’s global security infrastructure.

5. Third-Party Services

We use the following services to operate PulseQRC:

  • Supabase — database and authentication
  • Cloudflare — API hosting and static site delivery
  • Twilio — SMS alert delivery (only when configured by account holder)

Each provider has its own privacy policy and processes data on our behalf.

6. Data Retention

Feedback data is retained for the duration of the account holder’s subscription and for 30 days following account deletion. Account holders can request full data export or deletion at any time by contacting us.

7. Cookies

PulseQRC uses essential cookies only for authentication sessions. We do not use third-party tracking cookies, analytics pixels, or advertising scripts.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. For end-users: since we collect no personal data, there is nothing to delete. For account holders: email privacy@pulseqrc.com.

9. Changes to This Policy

We may update this policy from time to time. We will notify account holders of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.

10. Contact

If you have any questions about this privacy policy, please contact us at privacy@pulseqrc.com or visit our contact page.