Privacy policy

Last updated: June 2026

Who we are

QRAgents lets businesses create AI assistants tied to physical touchpoints such as QR codes and NFC tags. For our own account holders we act as data controller. For visitors who chat with an agent, the business operating that agent (“operator”) is the controller of the conversation, and QRAgents acts as a processor on the operator’s behalf.

What we collect

• Account data such as email and name when you sign up.
• Content you upload to your agent (text, files, and website URLs you ask us to ingest).
• Visitor chat messages and any files or images a visitor attaches to a conversation.
• Approximate location (city/country) derived from the visitor’s IP address.
• Precise device geolocation and local weather — only when the operator enables it and the visitor grants browser permission.
• Device type, language, time of day, and the scan tag in the link that was opened.
• A random visitor identifier stored in the browser’s local storage to recognize returning visitors and tailor context.
• Anonymous analytics about page views and chat activity.

How we use it

• To operate, maintain, secure, and improve QRAgents.
• To generate agent responses, including via AI providers such as OpenAI.
• To tailor an agent’s replies using the live context an operator has enabled.
• To run any tools or webhooks an operator has configured for their agent.
• To send essential service emails and, where permitted, product updates.

AI processing

Conversations and the relevant agent knowledge are sent to AI providers to generate responses. AI output can be inaccurate — see our Terms of use. We do not use your or your visitors’ content to train third-party foundation models, and our AI providers act under contractual data-processing terms.

Sharing & processors

We share data only with the infrastructure providers needed to run QRAgents: Supabase (database, authentication, storage), Vercel (hosting), OpenAI (AI responses and embeddings), Open-Meteo (weather, from coordinates only), Resend (email), and Stripe (payments). We do not sell personal information and do not use third-party advertising cookies.

Retention

We keep account and agent content for as long as your account is active. Conversation and analytics data are retained to operate and improve the service and may be deleted or anonymized on request. Operators can edit or delete their agent content from the dashboard at any time.

Your choices & rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to the processing of your personal data. Account holders can manage content from the dashboard. Visitors should contact the operator of the agent they used, or reach us and we will route the request. To exercise any right, email abdulrahmanshahzadlife@gmail.com.

Children

QRAgents is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect data from children.

International transfers & security

Our providers may process data in countries other than yours; where required we rely on appropriate safeguards. We use industry-standard measures to protect data, but no system is perfectly secure.

Cookies & local storage

We use a small number of cookies and local storage entries to keep account holders signed in and to remember returning visitors for context tailoring. We do not use third-party advertising cookies.

Changes & contact

We may update this policy and will note the date above. Questions? Email abdulrahmanshahzadlife@gmail.com.