Privacy Policy

This policy explains how TEYOBI BILISIM YAZILIM SANAYI TICARET LIMITED SIRKETI ("we", "us"), the operator of QRLivo, collects and uses personal information when you use qrlivo.com (the "Service"). We are the data controller for the information described here.

What we collect

• Account data: your name, email address and password (stored as a secure hash), or your Google account identifier, name and email if you sign in with Google.
• Page content: the text, photos, links and settings you add to your pages, and messages visitors leave in a page's guestbook.
• Order data: the plan you bought, the amount and the order status. Payment details are collected and processed by Paddle; we never see or store your card number.
• Usage and technical data: IP address and request logs used for security, fraud prevention and rate limiting; aggregated page statistics (views, QR scans, device type, link clicks). Statistics don't identify visitors — a small cookie holding only today's date is used to count unique visits.
• Messages: what you send us through the contact form or by email.

The free QR code generator doesn't store anything you type: the content is sent only to draw the code and is not saved or logged.

How we use it

To provide, secure and improve the Service; to publish your pages; to process orders; to answer support requests; and to send transactional emails such as receipts, password resets and expiry reminders. We send marketing emails only if you opt in, and you can unsubscribe at any time.

Legal bases (EEA/UK users)

We process data to perform our contract with you, to comply with legal obligations, and for our legitimate interests in keeping the Service secure and working well. Where we rely on consent, you can withdraw it at any time.

Who we share it with

• Paddle.com — our Merchant of Record, which processes payments, taxes and receipts under its own privacy policy.
• Hosting and storage providers — our server and database hosting provider, and Microsoft Azure for uploaded images.
• Google — only if you choose to sign in with Google.
• Cloudflare Turnstile — to protect forms from bots.
• Google Analytics — to understand how visitors use our website (pages visited, device and approximate location). It is not used on the pages our customers create.
• Embedded players — if a page includes YouTube, Vimeo or Spotify content, those providers load when a visitor opens the page.
• Authorities — when required by law.

We do not sell or rent your personal information, and we don't share it for cross-context behavioral advertising.

International transfers

We are based in Turkey and our providers may process data in other countries, including the United States and the European Union. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

Your pages

Pages are visible to anyone with the link or QR code, hidden from search engines unless you allow indexing, and can be protected with a password. Don't upload content you don't have the right to share.

Retention

We keep your account and pages while your account exists. Expired pages are kept so you can renew them. Order records are kept as long as tax and accounting laws require. You can ask us to delete your account and content at any time.

Your rights

Depending on where you live — including under the GDPR, UK GDPR, Turkey's KVKK and US state privacy laws such as the CCPA/CPRA — you may have the right to access, correct, delete or export your data, and to object to or restrict certain processing. To exercise these rights, email [email protected]. We won't discriminate against you for exercising them. You may also complain to your local data protection authority.

Cookies

We use essential cookies to keep you signed in, to protect forms against cross-site request forgery, to remember that you unlocked a password-protected page, and to count unique page visits without identifying anyone. On our own website (not on pages created by customers) we also use Google Analytics cookies to measure traffic; in the EEA, UK and Switzerland these are not set without consent. We don't use advertising cookies. You can opt out of Google Analytics with Google's browser add-on.

Security

Connections are encrypted with HTTPS, passwords are hashed, and access to production systems is restricted. No system is perfectly secure, but we work to protect your information.

Children

The Service is not directed to children under 13, and accounts may only be created by people 16 or older.

Changes

We may update this policy; we'll change the date above and, for significant changes, let you know by email or on the site.

Contact

TEYOBI BILISIM YAZILIM SANAYI TICARET LIMITED SIRKETI, 1246th St. No:3/9, Cevizlidere Neighborhood, Cankaya, Ankara, Turkey · [email protected]