Privacy Policy for DGtalQr
Last Updated: September 2026 Privacy Standard
1. Introduction
At DGtalQr (“we”, “our”, or “us”), we respect your privacy and are committed to protecting the data collected through our platform. This Privacy Policy details the types of information we collect, how that data is used, stored, processed, and safeguarded when you access our website, QR code solutions, and organization management portals.
By using DGtalQr, creating an account, or scanning a DGtalQr code, you agree to the collection and handling of data as described in this Privacy Policy.
2. Information We Collect
a) Organization & Account Information
When you register as an organization owner or staff member, we collect:
- Organization / Business Name and Branch details
- Owner Name, Contact Email Address, and Phone Number
- Account login credentials (passwords stored using cryptographically secure BCrypt hashing)
- Staff & Employee roster details (names, roles, contact info)
b) User-Generated Business Data & Order Records
To operate digital catalogs and business tools, our servers store the data you enter, including:
- Digital menus, product catalogs, service packages, item descriptions, and pricing
- Uploaded item images, logos, business banners, and resumes
- Customer order records, order quantities, table numbers, and billing timestamps
- Customer callback requests, inquiry details, and customer review submissions
c) Payment Information (Subscription Plans)
When organizations purchase premium plans, payments are handled directly by PCI-DSS compliant third-party payment gateways (e.g. Razorpay). DGtalQr does NOT collect, store, or view your full credit card numbers, debit card numbers, CVVs, or net banking passwords.
d) Technical & Visitor Log Data
When visitors scan QR codes or browse the platform, our servers automatically log non-personally identifiable technical information:
- IP address and approximate geographic region
- Browser type, device model, operating system, and screen resolution
- Page access times, URL paths, and HTTP referrer headers
3. Data Storage Policy & Self-Backup Recommendation
📦 Notice Regarding Business Data & Accounting Records
DGtalQr provides cloud storage for operational convenience to serve your menus and capture live customer orders. DGtalQr is not an archival accounting system or an infallible digital vault.
Organizations and business owners are strongly advised to regularly export, download, and maintain independent local backups of their orders, bills, customer inquiries, and sales histories. DGtalQr shall not be held liable for any operational loss resulting from data corruption, technical outages, or unexpected data deletion.
4. How We Use Collected Information
We use the collected information for the following legitimate business purposes:
- To generate, host, and render dynamic digital menus and catalog pages.
- To deliver real-time order notifications, callback requests, and review alerts to business owners.
- To verify login identities via Two-Factor Authentication (2FA) and device fingerprinting.
- To detect, prevent, and mitigate security threats, DDoS floods, and malicious hacking attempts.
- To send critical account notices, billing confirmations, and security alerts.
5. Public QR Code Visibility Disclaimer
QR codes created via DGtalQr are designed for public distribution and customer scanning. Any menu, price, photo, or business phone number linked to a public QR code is publicly visible on the internet.
Do not upload private, confidential, or sensitive personal documents to public menu items or public service listings.
6. Data Security Measures
We implement multi-layered enterprise security controls to protect your data, including:
- Encryption in Transit: 256-bit SSL/HTTPS encryption with HTTP Strict Transport Security (HSTS).
- Application Firewall & Anti-Scraping: Automated rate limiters, SQL injection filters, and bot flood protection.
- Content Security Policy (CSP): Cryptographic 128-bit Nonces on scripts and styles to prevent Cross-Site Scripting (XSS).
- Access Control: Session-level IDOR verification and BCrypt password encryption.
7. Third-Party Disclosures
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We only share necessary information with trusted service providers:
- Payment Gateways: For processing subscription payments securely.
- Cloud Infrastructure & CDN: For reliable hosting, caching, and DDoS mitigation (e.g. Cloudflare).
- Push & Email Delivery: For delivering real-time notification alerts (e.g. Firebase, SMTP Mailer).
- Google AdSense & Advertising Partners: Third-party vendors, including Google, use cookies (such as the DoubleClick DART cookie) to serve ads based on a user's prior visits to our website or other websites on the internet. Users may opt out of personalized advertising by visiting Google Ads Settings.
8. Data Retention & Deletion
- We retain account and catalog data as long as your account remains active and in good standing.
- Users may request account deletion or data removal by contacting
support@dgtalqr.com. - Upon verified deletion requests, user data will be permanently removed from active databases within 30 days, except where retention is required by applicable law.
9. Children’s Privacy
DGtalQr is intended for commercial use by business entities and adult individuals. We do not knowingly collect personal information from children under the age of 13.
10. Updates to this Privacy Policy
We may periodically update this Privacy Policy to reflect enhancements to our services or changes in legal regulations. Any revisions will be published on this page with an updated revision date. Continued use of DGtalQr constitutes acceptance of the revised policy.
11. Contact Us & Legal Entity
If you have any questions, privacy concerns, or data requests, please contact our registered entity:
Entity Name: DGtalQr Private Limited
Corporate Identification Number (CIN): U63121AP2026PTC127943
Email: support@dgtalqr.com
Website: www.dgtalqr.com
By using DGtalQr, you acknowledge that you have read, understood, and agreed to this Privacy Policy.