Privacy Policy

1. Introduction

IncudoLABS Inc. ("we," "our," or "us") operates the QRBolt service ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

As a Canadian company, we are committed to protecting your privacy and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Name and email address for account creation
• Payment information (processed securely by Paddle.com)
• Profile information and preferences
• Communication data when you contact us
• QR code content and metadata you create

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Analytics data (anonymized and aggregated)
• QR code scan analytics (anonymized)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our Service
• To process payments and manage subscriptions
• To communicate with you about your account and our Service
• To provide customer support
• To improve our Service and develop new features
• To ensure security and prevent fraud
• To comply with legal obligations
• To send you important updates and notifications

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Paddle.com: Payment processing and billing
• Google Analytics: Website analytics (anonymized data)
• Email Service Providers: Communication and notifications
• Cloud Infrastructure: Data storage and hosting

4.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate or prevent fraud or security issues

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure data centers and infrastructure
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

Under PIPEDA and other applicable privacy laws, you have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Withdrawal of Consent: Withdraw consent for certain uses
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Complaint: File a complaint with privacy authorities

To exercise these rights, please contact us at privacy@qrbolt.com.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic functionality
• Analytics Cookies: Help us understand usage patterns (anonymized)
• Preference Cookies: Remember your settings and preferences
• Security Cookies: Protect against fraud and security threats

You can control cookie settings through your browser, but disabling certain cookies may affect Service functionality.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Canada. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Adequacy decisions by privacy authorities
• Certification schemes and codes of conduct
• Consent where appropriate

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in our Service

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

You also have the right to file a complaint with the Privacy Commissioner of Canada if you believe we have not handled your personal information in accordance with applicable privacy laws.