Privacy Policy
Scope and responsibility
ADUPTIVE operates QRX and controls account, security, support and billing data. For personal data published or analyzed on a customer’s behalf, the customer determines the purpose and must have authority to share it. This notice covers QRX; external destinations have their own policies.
Data we process
Accounts use name, email, verification and authentication records. Passwords are hashed. Google sign-in supplies identity, name, email, verification, photo and authentication tokens; we do not request Gmail, Drive, contacts or calendar access. Dynamic QR codes store your content and settings. Visits may record time, browser, operating system, device, language and referring origin. Infrastructure processes IP addresses; authentication and explicitly trusted proxies may store them. We do not collect GPS coordinates. Static QR content is processed locally in your browser.
Purposes and legal grounds
We process data to perform the service contract, manage accounts, redirects, pages and support; meet legal obligations; and pursue legitimate interests in security, abuse prevention and service measurement, subject to applicable balancing and objection rights. Optional processing requiring consent must use separate consent, which can be withdrawn. Using the service is not blanket consent to unrelated purposes.
Recipients and international processing
Providers include Vercel, Neon, Cloudflare R2 and Brevo; Google participates when selected. Stripe or Paddle receives payment data when that checkout is enabled. Paddle acts as the seller of record for its transactions and applies its own buyer/privacy policies. We do not store full card numbers or sell personal data. Providers may process data outside your country, including Brazil, the US and Europe. Contact us for recipients and applicable contractual transfer safeguards; international transfers must meet LGPD/GDPR requirements where applicable.
Retention and protection
We retain data while needed for the account, service, security, legal obligations and dispute resolution. A plan’s analytics viewing window is not automatic deletion. Removing a QR deletes its content/events from the active database; its identifier remains reserved. Backups and security logs follow separate cycles. We use HTTPS, hashed passwords, encrypted OAuth tokens and access controls. Do not publish confidential data in public QR pages.
LGPD and GDPR rights
Where applicable, request confirmation, access, correction, portability, erasure, anonymization or blocking; information on sharing; restriction or objection; withdrawal of consent; and review of automated decisions. Requests go to aduptive@gmail.com. We may verify identity proportionately and respond within applicable legal deadlines, explaining lawful retention or other limits. You may complain to Brazil’s ANPD or your competent data protection authority, including an EU supervisory authority.
Cookies, children and updates
Only necessary session, security and language cookies and a local notice preference are used on QRX. Details are in the Cookie Policy. QRX is intended for adults and business users, not directed at children. Report children’s data to our contact. Updated 21 October 2026; material changes will be published and communicated where required.
Contact and support
ADUPTIVE CONSULTORIAS E COMUNICACAO LTDA · CNPJ 46.535.947/0001-06
Avenida Paulista, 1636, andar 15, conjunto 4, São Paulo/SP, 01310-200, Brasil