Privacy Policy

1. Data We Collect

We collect two types of data to provide the best possible service:

• Personal Account Data: Your email address and encrypted passwords for identity management (via Supabase Auth), along with billing details, customer IDs, and subscription statuses (via Paddle) to process secure payments.
• Scan Analytics Data (for Dynamic QRs): When someone scans your dynamic QR code, we collect general routing data, including: IP address (to resolve approximate geographic location: country, city, region, latitude, and longitude), operating system, browser and device type (User Agent), referral URL (Referrer), and marketing UTM parameters.

2. How We Use Your Data

We use the collected data strictly for the following purposes:

• Providing and managing our QR code creation and dynamic redirect service.
• Generating real-time, geographic, and chronological scan analytics dashboards in your account.
• Processing secure billing, managing plans, and tracking subscription states.
• Securing our platform against malicious activities, preventing system abuse, and auditing redirect URLs to filter out malware or phishing links.
• Responding to support tickets, issues, and inquiries.

3. Cookies and Tracking

We use cookies to improve browsing experience and protect data integrity:

• Language Preference (e.g., NEXT_LOCALE): To remember your preferred language (Arabic or English) when you browse ILTIQA.
• Session Management (e.g., sb-access-token): To keep you signed in securely and authorized to access your dynamic dashboard.
• Duplicate Scan Prevention (e.g., qr_scan_[shortId]): Set temporarily (for 1 hour) in the scanner's browser to prevent duplicate counts of successive scans, ensuring highly accurate statistics for dynamic QRs.

4. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We share data only with trusted service partners to operate the platform:

• Supabase: For securely hosting our database and handling secure user authentication.
• Paddle: For processing payments securely. Billing information is sent directly through encrypted channels compliant with PCI-DSS standards; we never store your payment card details on our servers.
• IP Geolocation Partners: To match the scanner's IP address with geographic coordinates and city details without permanently tracking the scanner's personal identity.

5. Data Security and Retention

We employ high-security standards, including SSL/TLS encryption for all transit data and encryption at rest for our databases. We retain your personal data as long as your account is active. If you delete your account, all associated QR codes and scan logs are permanently and securely deleted from our databases within 30 days.

6. Your Rights (GDPR Compliant)

As a user, you have full rights to access, correct, export, or request the deletion of your personal data. You can also pause dynamic tracking or clear history logs from your dashboard interface at any time.