Privacy Policy

FnR Management by DevP("we", "us", or "our") respects your privacy. This policy explains what data we collect, our legal basis for processing it, and the choices you have.

1. Roles (Data Controller vs. Processor)

For the purpose of global data protection laws (including GDPR and UK GDPR), we have two distinct roles:

• Data Controller: For your own account information (name, billing email, business details), we act as the Data Controller.
• Data Processor: For any feedback data submitted by your end-consumers via the QR funnels, you (the business) are the Data Controller, and we act solely as the Data Processor processing data on your behalf.

2. Data We Collect & Legal Basis

We process the following information under the legal basis of fulfilling our contract with you and pursuing our legitimate business interests:

• Account & Profile Details: Your name, email address, and profile picture provided via Google OAuth when logging in.
• Business & Campaign Settings: Business name, brand logo URLs, custom brand headlines, primary and accent colors, and custom short-link slugs.
• Scan & Rating Activity: Metadata of QR code scans, rating values submitted by users (stars), and timestamp details.
• Customer Feedback Data: Private written feedback messages submitted by customers who choose the private feedback route.
• Billing Metadata: Subscription status, billing plan ID, Razorpay payment link IDs, and transaction status. We do NOT store your credit card numbers; these are handled entirely by Razorpay.

3. How We Use Your Data

We use data to generate custom QR codes, process payments, present analytics dashboards, and prevent platform abuse. We do not sell personal data or share it for cross-context behavioral advertising.

4. Third-Party Processors & International Transfers

We are based in India, and we use secure global infrastructure providers (Supabase for authentication/database, Vercel for hosting, Razorpay for payments). By using our service, you acknowledge that your data may be transferred to and processed in data centers outside your home country. We ensure our providers comply with strict security standards and rely on Standard Contractual Clauses (SCCs) or other recognized safeguards for international data transfers where required.

5. Data Retention, Security, and Breaches

We retain your account data for as long as your account is active. End-consumer feedback data is retained on behalf of the business. We implement industry-standard security measures (SSL encryption, secure database roles) to protect your data. In the unlikely event of a severe data breach compromising personal information, we will notify affected users within 72 hours of becoming aware of the incident, as required by law.

6. Your Rights (Deletion & Portability)

Depending on your location (e.g., EU, UK, California), you have the right to access, correct, port (export), and delete your personal data. You may request an export of your analytics and feedback data, or request full account deletion, by contacting us at fnr.management.software@gmail.com. We will respond to all legitimate requests within 30 days.

7. Children's Privacy

Our services are designed strictly for businesses and are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we discover we have inadvertently collected such data, we will delete it promptly.

Our cookie and tracking practices are described in our Cookie Policy.