Effective: January 1, 2025 · Last updated: April 2026Vigente: 1 de enero de 2025 · Actualizado: Abril 2026
We collect: (1) information you provide directly — email address, phone number, name; (2) information collected automatically — IP address (hashed), device type, pages visited, QR code scan data, language preference; (3) driver information — full name, tax ID (AES-256-GCM encrypted), mailing address, payment method details (encrypted), W9 data. Recopilamos: (1) información directa — correo electrónico, teléfono, nombre; (2) automáticamente — IP (hash), tipo de dispositivo, páginas visitadas, datos de escaneo QR; (3) datos de conductores — nombre, identificación fiscal (encriptada), domicilio, método de pago.
We use cookies and localStorage for: session authentication (driver login — HttpOnly, Secure cookie; 7-day expiry); language preference (localStorage); referral tracking (cookie — 30-day expiry); lead capture confirmation (localStorage). We do not use advertising cookies or third-party tracking pixels. Usamos cookies y localStorage para: autenticación de sesión; preferencia de idioma; seguimiento de referidos; confirmación de captura de datos. No usamos cookies publicitarias ni píxeles de seguimiento de terceros.
We use collected information to: operate our platform and track affiliate conversions; send deals and alerts you have requested; process driver commission payments; comply with IRS reporting requirements (1099-NEC); improve our service; deliver targeted advertising through affiliate partners where you have consented. Usamos la información para: operar la plataforma; enviar ofertas y alertas solicitadas; procesar comisiones; cumplir con el IRS; mejorar el servicio; publicidad dirigida donde usted haya dado su consentimiento.
We use: Supabase (database hosting — encrypted at rest); Cloudflare (CDN, analytics, DDoS protection); Resend (transactional and marketing email delivery); MaxBounty, Commission Junction, and other affiliate networks (conversion tracking — subID only, no PII). Each provider has its own privacy policy. Usamos: Supabase (base de datos); Cloudflare (CDN, analíticas); Resend (correo electrónico); MaxBounty y otras redes de afiliados (seguimiento de conversiones — solo subID, sin datos personales).
We do not sell your personal information to unrelated third parties. We may share your contact information (email, phone) with our affiliate marketing partners for the purpose of delivering relevant offers when you have consented to receive promotional communications. Driver tax and payment information is shared with the IRS as required by law. No vendemos su información personal a terceros no relacionados. Podemos compartir información de contacto con socios de marketing cuando usted haya dado su consentimiento. La información fiscal de conductores se comparte con el IRS según la ley.
Email and phone captures: retained for 3 years or until deletion is requested. Driver accounts: retained for 7 years after account closure for tax compliance (IRS requirement). Scan logs: retained for 2 years. IP hashes (non-reversible): retained for 90 days. W9 data (encrypted): retained for 7 years per IRS requirements. Capturas de email/teléfono: 3 años o hasta solicitud de eliminación. Cuentas de conductores: 7 años por cumplimiento fiscal. Registros de escaneo: 2 años. Hashes de IP: 90 días. Datos W9: 7 años.
Under the California Consumer Privacy Act (CCPA), California residents have the right to: (1) Know what personal information we collect and how it is used; (2) Delete personal information (subject to certain exceptions); (3) Opt-out of the sale of personal information — we do not sell personal information; (4) Non-discrimination for exercising CCPA rights. To exercise these rights, email privacy@qr-perks.com with the subject "CCPA Request." Según la CCPA de California, los residentes tienen derecho a conocer, eliminar y optar por no vender su información personal. Para ejercer estos derechos, envíe un correo a privacy@qr-perks.com con el asunto "CCPA Request."
If you are located in the European Economic Area or United Kingdom, you have rights under GDPR including: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object. Our lawful basis for processing is consent (for marketing communications) and legitimate interests (for service operation). To exercise GDPR rights, email privacy@qr-perks.com. Si se encuentra en el EEE o Reino Unido, tiene derechos según el GDPR: acceso, rectificación, eliminación y portabilidad de datos. Para ejercerlos, escriba a privacy@qr-perks.com.
Email: Unsubscribe via any email footer link or here. SMS: Reply STOP to any text message to immediately opt out. Opting out of SMS does not affect your email subscription or any other communication, and does not affect your ability to access deals. Account deletion: Email privacy@qr-perks.com. We honor all opt-out requests within 10 business days (SMS opt-outs are immediate). Correo electrónico: use el enlace en el pie del correo o aquí. SMS: responda STOP para cancelar inmediatamente. Cancelar SMS no afecta otras comunicaciones. Eliminación de cuenta: privacy@qr-perks.com.
If you provide your phone number and consent to SMS communications, you may receive recurring automated marketing text messages from QR Perks. Messages may include: exclusive deal alerts, sweepstakes notifications, promotional offers from our affiliate partners, and account notifications. Message frequency varies (up to 4–8 per month). Message & data rates may apply. To opt out of SMS at any time, reply STOP to any message. You will receive one confirmation and no further messages. Opting out of SMS does not affect email communications or your access to deals. Reply HELP for assistance or contact support@qr-perks.com. For full SMS terms see Consumer Data Terms. Si proporciona su teléfono y consiente mensajes SMS, puede recibir mensajes de texto de marketing automatizados recurrentes de QR Perks, incluidas alertas de ofertas y notificaciones de sorteos. Frecuencia: hasta 4–8 por mes. Tarifas aplican. Para cancelar SMS en cualquier momento, responda STOP. Cancelar SMS no afecta el correo electrónico ni el acceso a ofertas.
We do not record telephone calls without the consent of all parties. Automated text messages are sent only to users who have provided express written consent as described in this policy and our Consumer Data Terms. We do not monitor or record text message replies except as necessary to process opt-out requests (STOP/UNSUBSCRIBE commands). No grabamos llamadas telefónicas sin el consentimiento de todas las partes. Los mensajes de texto automatizados se envían únicamente a usuarios que han dado su consentimiento expreso por escrito. No monitoreamos ni grabamos respuestas de texto excepto para procesar solicitudes de cancelación (comandos STOP/UNSUBSCRIBE).
privacy@qr-perks.com
[Business Address]