Privacy Policy

Last updated: January 26, 2026

Introduction

Scanboard ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our QR code management platform.

Data We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Profile picture (if using social login)

QR Code Scan Analytics

When someone scans a QR code created through Scanboard, we collect:

  • Device type (mobile, tablet, desktop)
  • Operating system and browser
  • Approximate location (country, city) derived from IP address
  • Language preference
  • Referrer URL
  • Date and time of scan

We do not store full IP addresses. Location data is approximate and derived from IP geolocation services.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. Please refer to Stripe's Privacy Policy for information about how they handle payment data.

How We Use Your Data

  • Account data: To provide and maintain your account, authenticate you, and communicate with you about your account.
  • Analytics data: To provide QR code scan statistics to QR code owners, helping them understand how their codes are used.
  • Service improvement: To analyze usage patterns and improve our platform.

Legal Basis for Processing

  • Consent: When you create an account, you consent to our processing of your account data.
  • Legitimate interest: We process scan analytics data based on our legitimate interest in providing analytics services to QR code owners. This data helps businesses understand customer engagement.
  • Contract: Processing necessary to provide the services you've requested.

Data Retention

We retain your account data for as long as your account is active. Analytics data is retained according to your plan's data retention period (7 days to unlimited, depending on plan). When you delete your account, all associated data is permanently deleted.

Third-Party Services

We use the following third-party services to operate Scanboard:

  • Supabase: Database and authentication infrastructure
  • Stripe: Payment processing
  • Vercel: Hosting and content delivery
  • Resend: Transactional emails

Each of these services has their own privacy policy governing how they handle data.

Your Rights

Under GDPR and similar regulations, you have the following rights:

  • Access: You can export your personal data at any time from your account settings.
  • Deletion: You can delete your account and all associated data from your account settings.
  • Rectification: You can update your profile information at any time.
  • Portability: Your data export is provided in a machine-readable JSON format.

To exercise these rights, visit your Account Settings.

Cookies and Tracking

We use the following cookies and local storage:

  • Authentication cookies: Essential cookies to keep you logged in.
  • Visitor tracking: We use local storage to generate a random visitor ID for analytics purposes. This helps QR code owners see repeat vs. new visitors. This ID is not linked to any personal information.

Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. Our infrastructure is hosted on secure, SOC 2 compliant providers.

International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for any international transfers of personal data.

Children's Privacy

Scanboard is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our website.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: privacy@scanboard.app