Scanza Privacy Policy

Last updated: July 2026

Scanza, LLC ("Scanza," "we," "us," and "our") operates scanza.io and the QR Code Studio and live scan analytics platform, together with all related features and services (the "Services"). This Privacy Policy describes how we collect, use, and disclose personal information when you visit our website, create an account, generate or manage QR codes, or otherwise use or communicate with us about the Services.

This Privacy Policy applies both to the businesses and individuals who create Scanza accounts to generate and manage QR codes ("Customers") and, where relevant, to the members of the public who scan a Customer's QR code ("Scan Visitors"). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose information as described here.

1. Personal Information We Collect

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been aggregated, anonymized, or de-identified such that it can no longer reasonably identify you. Depending on how you interact with the Services, whether you are a Customer or a Scan Visitor, and where you live, we may collect or process the following categories of personal information:

Account and Contact Information

Your name, company name, email address, phone number, billing address, and login credentials when you create or manage a Scanza account.

Financial Information

Payment card details, billing information, transaction history, and subscription Plan selected, processed on our behalf by our third-party payment processor, Stripe. Scanza never receives or stores your full card number; Stripe collects it directly through its hosted checkout and billing portal pages.

QR Code and Destination Content

The destination URLs, landing page content, branding assets, and other materials you associate with the dynamic QR codes you create through the Services.

Scan Data

When a Scan Visitor scans a Customer's QR code, we collect scan-level information including the date and time of the scan, approximate geographic location (derived from IP address), device and browser type, and the destination the scan was directed to. Scanza processes this Scan Data primarily on behalf of the Customer whose code was scanned, so that the Customer can view analytics in their dashboard; we do not knowingly use Scan Data to build a profile of a Scan Visitor's identity across unrelated Customers.

Communications

Information you provide when you contact our support team, respond to a survey, or otherwise communicate with us.

Device and Usage Information

Information about the device, browser, and network you use to access the Services, your IP address, unique identifiers, and information about how you navigate and interact with the Services, including through cookies and similar technologies.

2. Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, generate a QR code, subscribe to a Plan, or communicate with us;

Automatically through the Services, including from your device and browser when you use the Services or scan a QR code, and through cookies and similar technologies;

From our service providers, including payment processors, cloud hosting providers, and analytics vendors who collect or process information on our behalf; and

From our business and marketing partners or other third parties, where permitted by applicable law.

3. How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

Provide and Improve the Services. We use personal information to create and manage your account, generate and re-point QR codes, process payments and manage subscriptions, enforce Plan limits such as monthly project allowances, populate your live scan analytics dashboard, provide customer support (including storing and responding to messages you send through our contact forms), and otherwise operate, maintain, and improve the Services.

Analytics Delivered to Customers. We use Scan Data to build the analytics, heatmaps, and geographic mapping displayed in a Customer's dashboard so that the Customer can measure engagement with its physical materials.

Marketing and Communications. We use contact information to send product updates, marketing, and promotional communications by email or other channels, and to respond to your inquiries. You may opt out of marketing communications at any time as described in Section 8, Your Rights and Choices.

Security and Fraud Prevention. We use personal information to authenticate accounts, maintain the security of the Services, detect and prevent fraudulent, unauthorized, or malicious activity, and protect the rights, property, and safety of Scanza, our Customers, and others.

Legal Compliance. We use personal information as necessary to comply with applicable law, respond to valid legal process, enforce our Terms of Service and other policies, and establish, exercise, or defend legal claims.

4. How We Disclose Personal Information

We may disclose personal information to third parties for the purposes described in this Privacy Policy, including:

With service providers who perform functions on our behalf, such as cloud hosting (Vercel and Neon), payment processing (Stripe), customer support tools, analytics infrastructure, and email delivery (Resend);

With the Customer whose QR code was scanned, in the form of Scan Data displayed on that Customer's analytics dashboard;

With our affiliates or within our corporate group, consistent with this Privacy Policy;

In connection with a business transaction, such as a merger, financing, acquisition, or sale of assets;

To comply with applicable law, respond to lawful requests from public authorities, or protect the rights, property, or safety of Scanza, our users, or others; and

With your consent or at your direction, such as when you choose to connect a third-party integration to your account.

Scanza does not sell personal information to third parties for money. Depending on where you live, certain sharing of information for advertising purposes may be considered a "sale" or "share" under applicable law; see Section 8, Your Rights and Choices, for information about your choices.

5. Our Service Providers

The Services are built on infrastructure provided by third-party cloud hosting, payment processing, and analytics providers, which process personal information on our behalf in order to operate and improve the Services for you. Information you submit to the Services may be transmitted to and processed by these service providers, including in countries other than where you reside, solely to provide and support the Services.

We contractually require our service providers to use personal information only as necessary to perform their services for us and in a manner consistent with this Privacy Policy and applicable law.

6. Third-Party Destinations and Links

A Customer's QR code may direct a Scan Visitor to a destination page operated by that Customer or another third party, which is not owned or controlled by Scanza. The Services may also contain links to other websites or platforms operated by third parties. We do not control, and are not responsible for, the privacy or data practices of any destination page or third-party site, and we encourage you to review the privacy policy of any site before providing personal information to it.

This Privacy Policy applies only to information collected through the Services described above, and not to any Customer destination page or third-party website.

7. Children's Data

The Services are intended for business and organizational use and are not directed to children. We do not knowingly collect personal information from children under the age of 16 through account registration. As of the date of this Privacy Policy, we do not have actual knowledge that we "sell" or "share" (as those terms are defined under applicable law) the personal information of individuals under 16 years of age. If you believe a child has provided us with personal information, please contact us using the details in Section 12, Contact Us, so that we can address it.

8. Security and Retention of Your Information

We use administrative, technical, and physical safeguards designed to protect personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Information you transmit to us may not be secure while in transit, and we recommend against sending sensitive information through unsecure channels.

We retain personal information for as long as necessary to provide the Services, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. Scan Data associated with a Customer's account is generally retained for the duration of that Customer's subscription and for a reasonable period afterward, consistent with our data retention practices and applicable law.

9. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information. These rights are not absolute and may be subject to exceptions and limitations under applicable law.

Right to Access / Know. You may request access to, or a copy of, the personal information we hold about you.

Right to Delete. You may request that we delete personal information we maintain about you, subject to certain exceptions.

Right to Correct. You may request that we correct inaccurate personal information we maintain about you.

Right to Portability. You may request a copy of your personal information in a portable format, in certain circumstances.

Right to Opt Out of Targeted Advertising or Sharing. Depending on where you reside, you may have the right to opt out of certain sharing of your personal information for targeted advertising purposes.

If you visit the Services with the Global Privacy Control opt-out signal enabled, we will treat that signal as a request to opt out of applicable sharing, where required by law. Other than the Global Privacy Control, we do not currently respond to other "Do Not Track" browser signals. You may manage marketing email preferences at any time using the unsubscribe link in our emails; you will continue to receive non-promotional messages related to your account or transactions. If you reside in the United Kingdom or European Economic Area, you may also have the right to object to or restrict certain processing of your personal information and to withdraw consent where we rely on consent as our legal basis for processing, without affecting the lawfulness of processing before withdrawal. To exercise any of these rights, contact us using the details in Section 12, Contact Us. We may need to verify your identity before processing your request, and you may designate an authorized agent to act on your behalf, subject to our verification requirements. We will not discriminate against you for exercising any of these rights.

10. Complaints

If you have concerns about how we process your personal information, please contact us using the details in Section 12, Contact Us. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

11. International Transfers

We may transfer, store, and process personal information outside the country in which you reside, including in the United States. Where we transfer personal information out of the European Economic Area, United Kingdom, or Switzerland, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent safeguards, unless the transfer is to a jurisdiction recognized as providing an adequate level of protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Services, update the "Last updated" date, and, where required by law, provide additional notice of material changes.

13. Contact Us

If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of the rights described above, please contact us at:

Scanza, LLC

[Company Address]

Email: privacy@scanza.io

Website: scanza.io

For purposes of applicable data protection law, Scanza is the controller of Customer account information and the processor or service provider of Scan Data collected on behalf of our Customers, unless otherwise stated.