Privacy Policy

1. Introduction

Welcome to Scanheim, a product operated by Group Hug Software, LLC, a Delaware limited liability company ("Company," "we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dynamic QR code generation and management service.

2. Information We Collect

We may collect several types of information from and about users of our service, including:

• Account Information: First name, last name, email address, and password when you create an account.
• Profile Information: Time zone preferences and other settings.
• QR Code Data: Information related to QR codes you create, including names, destination URLs, and images.
• Campaign Data: Campaign names, descriptions, logos, and related information.
• Usage Data: Information about how people interact with your QR codes.
• Device Information: IP address, browser type, operating system, and other technical data.
• Location Data: General location information (city, region, country) based on IP address when QR codes are scanned.
• Session Information: Browser session details and activity timestamps.

3. Legal Basis for Processing Your Information

We collect and process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations when you subscribe to our services.
• Legitimate Interests: For business improvements, fraud prevention, and analytics.
• Consent: Some data is collected with your explicit consent, which you can withdraw at any time.
• Legal Compliance: To comply with applicable laws and regulations.

Legal Basis for Specific Data Types:

• Account and Profile Information: Contract performance and legitimate interests.
• QR Code and Campaign Data: Contract performance.
• Usage and Analytics Data: Legitimate interests and consent.
• Technical and Device Information: Legitimate interests and consent.

4. Cookies and Similar Technologies

We use cookies to enhance your experience. The types of cookies we use include:

• Essential Cookies: Required for core functionality.
• Functionality Cookies: Store your preferences.
• Performance/Analytics Cookies: Help us analyze usage patterns.
• Session Cookies: Temporary cookies deleted when you close your browser.

You can manage cookie preferences through your browser settings.

5. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our application's performance and services.
• Process subscriptions and transactions.
• Generate analytics about feature usage throughout the application.
• Send notifications, security alerts, and service updates.
• Respond to support requests.
• Prevent fraud and ensure security.
• Share anonymized, aggregated data with partners, contractors, or other third parties for purposes such as industry analysis, demographic profiling, trend analysis, and advertising.
• Comply with legal obligations.

6. Data Retention

We retain all your data unless otherwise requested to be removed either via legitimate request from the owner of the data or by legal authorities. We do not retain payment-specific information such as Payment Methods. Stripe, our payment processor, stores this information for us.

• Account Information
• QR Code Data
• Campaign Data
• Analytics Data
• Communication Records
• Log Data

7. Data Security

We implement security measures such as those below. Note that despite our efforts, no system is 100% secure and we will notify you promptly of any data breaches.

• Encryption: SSL encryption for data transmission.
• Hashing: Sensitive data such as passwords are hashed.
• Access Controls: Strict authentication and authorization policies.
• Data Backups: Regular encrypted backups.
• Security Monitoring: Continuous monitoring for threats.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the United States. We ensure compliance with applicable data protection laws when transferring your data internationally.

9. Third-Party Services

We integrate with third-party services for payments, analytics, and other functions. Please review their privacy policies separately. Our payment processor is Stripe (https://stripe.com).

10. Your Rights

Depending on your location, you may have certain rights regarding your personal data:

For All Users:

• Access: Obtain a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request data deletion when no longer necessary.
• Data Portability: Receive your data in a portable format.

For California Residents (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

For EU/EEA Residents (GDPR):

• Right to Object: Object to data processing, particularly for marketing.
• Right to Restrict Processing: Limit how we use your data.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

11. How to Exercise Your Rights

To exercise your rights, contact us with:

• Your full name and registered email.
• The specific right you wish to exercise.
• Details of your request.

We may require verification of your identity before processing your request.

12. Children's Privacy

Our service is not directed to children under 13 (or 16 in certain jurisdictions). If we learn that we have collected data from a child without parental consent, we will delete it immediately.

13. Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated via email to our registered users or through a notice on our service. Your continued use of the service after changes constitutes acceptance of the revised policy.

14. Contact Information

If you have questions about this Privacy Policy, please contact us.

Group Hug Software, LLC Operator of Scanheim