Privacy Policy
Last updated: August 2026
Who we are
InstantQR is operated by AetherDev Solutions, Shivaji Chowk, 101, Raigad Building, Hinjawadi, Maharashtra 411057, India. For any privacy question, email info@aetherdevsolutions.com or call +91 89751 85770.
What we collect
When you create an account we store:
- Your email address and, if you give it, your name
- A bcrypt hash of your password — never the password itself
- Your plan, billing status and trial dates
When you create a QR code or business profile we store what you put in it: the destination link, text, phone number, email address, payment ID, address or social links you choose to encode, plus any logo or cover image you upload.
Scan analytics
When someone scans a dynamic QR code or opens a business profile we record the event so the owner can see how it is performing. That record holds the date and time, the browser, operating system and device type derived from the user agent, the country when our network provider supplies it, the referring page when the browser sends one, and the IP address as our server sees it.
We set no cookies on scanners, build no advertising profiles, and neither sell nor share this data. IP addresses are kept for abuse prevention and are not shown to QR code owners — owners see aggregate counts only. Requests that identify themselves as crawlers or automated clients are served but not counted.
We email you only for account and service reasons: sign-in verification codes, password resets, and replies to enquiries you send us. No marketing email unless you ask for it.
Cookies
We set one cookie, qr_session, holding your signed session token. It is httpOnly, so page scripts cannot read it, and it expires after 30 days — or two hours for an administrator support session. See our Cookie Policy.
Public pages you create
A business profile you publish at /b/your-link is public by design: anything on it can be seen by anyone with the link and may be indexed by search engines. You can switch it off at any time from your dashboard. Short redirect links (/q/…) are excluded from search indexes.
Retention and deletion
Deleting a QR code or business profile removes it and its scan history permanently. Deleting your account removes your profile, every QR code and business profile you own, and all associated scan data. Printed codes stop working at that point, and deletion cannot be undone.
Your rights
You can ask for a copy of your data, correction of it, or its deletion by emailing info@aetherdevsolutions.com. We respond within 30 days.
Security
Traffic is served over HTTPS. Passwords are hashed with bcrypt. Session tokens are signed and verified with an HMAC and are invalidated when you change your password. Sign-in, registration and password reset are rate limited. Links submitted to us are validated before we will redirect anyone to them.
Changes
If we change this policy materially we will update the date above, and where the change affects data we already hold we will tell account holders by email.