Privacy Policy

What we collect

Account data: your name, email, and sign-in method. Content: the QR codes, cards, images and files you create. Scan analytics: when a dynamic code is scanned we record the time, approximate location (city level), and device type — never the scanner's identity. Leads: details that visitors voluntarily submit through a card's "share your details" form are stored for that card's owner. Payments are processed by Stripe; we never see or store card numbers.

How we use it

To run the Service, show you your analytics, send service emails (like lead alerts), and improve QRYZEN. We do not sell your data, and we do not run advertising.

Where it lives

Data is stored with vetted processors: Supabase (database & storage), Vercel and Cloudflare (hosting & delivery), Stripe (payments), and Resend (email). Access is protected by row-level security: each account can only read its own data.

Public content

Digital visiting cards are public by design — anyone with the link or QR can view them. Only publish what you're happy to share, and edit or delete your card anytime.

Google Calendar (optional)

If you connect your Google account, QRYZEN requests only the minimum Google Calendar permissions needed for the booking feature: to read your free/busy times so we never offer a slot that clashes with an existing meeting, and to create the appointment events you accept (with a video-meeting link). We store only an encrypted connection token — we do not copy or warehouse your calendar events.

QRYZEN's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is never used for advertising, sold, or shared, and is never used to train AI or machine-learning models. You can disconnect Google Calendar anytime from Settings → Integrations, which revokes and deletes the stored token.

AI features

Some QRYZEN features use third-party AI services to generate or refine content — for example drafting a page, form, funnel or catalogue, polishing or translating text, reading a business card, flyer or product photo you upload, and the Annie assistant. These features run on Anthropic (Claude) for text and image understanding, and on OpenAI (Whisper) and Deepgram for optional voice-to-text, all on their standard paid API tiers via direct API calls (no model aggregators or gateways).

Only the content needed for the task is sent — the business text you type or the image/voice note you upload. Google user data is never sent to any AI service. Your connected Google Calendar data is used only for the booking feature (free/busy clash-detection and creating the appointments you accept) and never flows into any AI prompt, and is never used to train AI or machine-learning models, in line with Google's Limited Use requirements.

Your rights

You can edit or delete your codes and cards anytime, and request account deletion (which removes your data) by writing to hello@qryzen.com. To report a code or card that abuses the Service, email the same address with the link.