Last updated 27 October 2026
Privacy Policy
This Privacy Policy explains how Qreatd ("we", "us", "our") processes personal data when you use qreatd.com and related services (the "Service"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.
1. Data controller
The controller for personal data processed through the Service is EASD, operating the Qreatd product. For privacy requests, contact privacy@qreatd.com or hello@easd.ai.
2. Data we collect
- Account data: name, email, password (hashed), organization details, team members, and role information.
- QR and routing content: destinations, campaign metadata, link pages, forms, digital cards, and assets you upload.
- Scan and analytics data: scan timestamps, approximate location derived from IP, device/user-agent, referrer, and related engagement metrics.
- Form responses: data submitted by end users to forms you publish.
- Payment data: processed by Stripe; we receive subscription status and billing metadata, not full card numbers.
- Usage and logs: IP address, diagnostic events, and security logs.
3. Purposes and legal bases
- Provide the Service (Art. 6(1)(b)), create accounts, host QR codes and destinations, serve redirects, show analytics, and operate forms and pages you configure.
- Billing and legal obligations (Art. 6(1)(b) and (c)).
- Security and abuse prevention (Art. 6(1)(f)).
- Product improvement (Art. 6(1)(f)), aggregate usage analysis.
- Consent (Art. 6(1)(a)), where required for non-essential cookies or marketing.
4. Your role as customer
When you collect personal data from people who scan your codes or submit your forms, you are typically the controller of that end-user data. You must have a lawful basis and provide appropriate notices. We act as your processor for that data under Art. 28 GDPR and process it only to provide the Service.
5. Recipients and processors
We use hosting, database, email, CDN, payment, and analytics providers as processors under written contracts. We do not sell personal data. We may disclose data if required by law or to protect the Service and users.
6. International transfers
Transfers outside the EEA/UK use appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent measures.
7. Retention
Account and billing data are kept while your account is active and as required by law. Scan analytics and form responses are retained according to your plan and deletion requests. Security logs are kept for a limited operational period.
8. Your rights
Under the GDPR you may have the right to access, rectify, erase, restrict, or object to processing; data portability; withdraw consent; and lodge a complaint with a supervisory authority. Contact privacy@qreatd.com. We may verify identity and aim to respond within one month.
9. Cookies
Essential cookies keep you signed in and secure the Service. Non-essential analytics or marketing technologies, if used, require consent where the law requires it.
10. Children
The Service is not directed to children under 16. Contact us if you believe we have collected a child's data so we can delete it.
11. Changes
We may update this policy and will post the revised version with an updated date.
12. Contact
Privacy: privacy@qreatd.com. General: hello@easd.ai.