Last updated: February 26, 2026
Data Protection & GDPR
QRNova is fully committed to data protection laws (including LGPD and GDPR). This page details how we handle your data, our use of cookies, and our responsibilities to ensure your total security.
1. Your Rights as a Data Subject
You have full power over your personal data. According to data protection laws, you can request at any time: (a) Confirmation of the existence of treatment; (b) Access to data; (c) Correction of incomplete or inaccurate data; (d) Anonymization or deletion of unnecessary data; (e) Data portability. In your profile dashboard, you have tools to manage these requests autonomously.
2. Data Collection and Cookies
We use cookies and similar technologies to improve your experience. The cookies we use are divided into: (1) Essential: Necessary to keep your session active and ensure login security; (2) Functional: To remember your design and language preferences; (3) Analytical: We collect anonymized access data (such as browser and operating system) to understand the performance of your QR Codes. You can manage cookie preferences through your browser settings.
3. Data Storage and Security
Your account data and QR Codes are stored encrypted in high-availability servers provided by Supabase (AWS infrastructure). We use SSL/TLS protocols in all communications. Sensitive payment data is processed exclusively by Stripe, ensuring compliance with the PCI-DSS standard and never touching our internal servers.
4. Purpose-Driven Processing
Data processing at QRNova is strictly limited to the execution of the contracted service (generation and monitoring of QR Codes). We do not sell your data to third parties nor do we perform data matching for the creation of behavioral profiles for external advertising purposes.
5. Responsibilities
As Data Controllers, our responsibility is to ensure the integrity of the platform and compliance with security standards. As a Processor of the scan data you collect via QR Code, we ensure that this data is processed according to your instructions within the platform's functionalities. The user is responsible for the content of the links linked to the generated QR Codes.
6. Privacy Channel (Data Protection Officer)
To exercise your rights or ask specific questions about this policy, you can contact our Data Protection Officer (DPO) via email: [email protected]. We will respond to all requests within the legal period of 15 days.