Privacy Policy

Prolinks operates prolinksqr.com and related services (the "Service"). The Service is provided by Prime Apps, a company registered in Armenia ("we," "us," or "our"). This Privacy Policy describes how we collect, use, and protect your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this policy. This policy should be read together with our Terms & Conditions and our Cookie Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and password. If you sign up or sign in using Google or Facebook, we also receive basic profile information from that provider, such as your name, email address, and profile avatar.

1.2 QR Code Scan Data

When someone scans a QR code created through our Service, we automatically record the date and time of the scan, the browser and operating system used, the device type and device vendor, the approximate location of the scan (country, region, and city), and whether the scan appears to originate from an automated bot.

The scanner's IP address is processed in memory to derive that approximate location and is not stored in our databases — we retain only the derived location data described above. We do not store the scanner's name, email address, or any other directly identifying information.

This data is collected automatically without requiring consent from the scanner. This is necessary for providing analytics features to our users. The scan data is associated with the account that created the QR code.

1.3 Content You Upload

The Service lets you upload files such as logos, images, menu photos, and other media. These files are stored on Amazon S3 and are served publicly through the QR codes and pages you create.

Uploaded images are automatically scanned using Amazon Rekognition to detect content prohibited by our Terms & Conditions. Uploads that fail this check may be rejected or removed, and repeated violations may result in suspension of your account.

1.4 Payment Information

Payment processing is handled by our payment providers, LemonSqueezy and Paddle. We do not store your complete credit card information on our servers. Please refer to the privacy policy of the applicable provider for information on how they handle your payment data.

2. How We Use Your Information

We use the information we collect to provide and maintain the Service, process your transactions and manage your subscription, provide you with analytics about your QR code scans, moderate uploaded content for compliance with our Terms & Conditions, communicate with you about your account and respond to support requests, send you important service updates and security alerts, detect and prevent fraud or abuse of the Service, and comply with legal obligations.

We may also use your email to send you marketing communications about new features, promotions, or other news about Prolinks. You can opt out of marketing emails at any time.

3. Data Storage and Security

3.1 Where We Store Your Data

Your data is stored on Amazon Web Services (AWS) servers located in the United States (us-east-2 region).

3.2 Security Measures

We take the security of your data seriously. We implement industry-standard security measures including HTTPS/SSL encryption for all data in transit, password hashing (passwords are never stored in plain text), encryption of sensitive credentials such as API keys, and two-factor authentication (2FA) available for your account. While we strive to protect your information, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

4. Data Retention

4.1 Account Data

We retain your account information for as long as your account is active. When you delete your account, your account, users, links, folders, menus, templates, invitations, and activity logs are permanently deleted and cannot be recovered.

4.2 Scan Analytics Data

QR code scan data is retained for as long as your account is active. When your account is deleted, all associated scan data is also deleted.

4.3 Expired Accounts

If your free trial or subscription expires and is not renewed, your account and its data are retained for thirty (30) days after expiry so that you can reactivate. We email you before deletion. After that period, the account and all associated data are deleted automatically and cannot be recovered.

4.4 Uploaded Files

Files that are no longer referenced by any of your links or pages — including files belonging to deleted accounts — are removed from our storage by a scheduled cleanup process. Deletion of the underlying files may therefore lag the deletion of the related account or content by a short period.

5. Data Sharing

We do not sell your personal data to third parties.

We may share your information with the following parties:

Service Providers: We share data with third-party service providers who help us operate our Service, including Amazon Web Services (hosting, file storage, and automated content moderation), Mailgun (email delivery), LemonSqueezy and Paddle (payment processing), Google Analytics 4, Hotjar and Microsoft Clarity (website and product analytics), and Tidio (live chat support). These providers only have access to the data necessary to perform their services and are obligated to protect your information. Analytics and live chat providers are only loaded where you have consented to the corresponding cookie category — see our Cookie Policy.

Endpoints You Configure: If you set up webhooks, we send scan and account events to the endpoint URLs you specify. You are responsible for the security and privacy practices of any endpoint you configure.

Legal Requirements: We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Cookies and Browser Storage

We use a small number of essential cookies, including a secure, HTTP-only cookie that holds your refresh token so you stay signed in between sessions. Essential cookies are required for the Service to work and cannot be disabled.

We also use browser local storage to keep your session details and your cookie preferences on your device. You can clear this data at any time by clearing your browser storage or logging out.

Analytical and functional cookies — such as those set by Google Analytics 4, Hotjar, Microsoft Clarity, and Tidio — are only used where you have accepted the corresponding category in our cookie banner. A full description of each category is available in our Cookie Policy.

7. Your Rights

You have the following rights regarding your data:

Access: You can access your account information at any time through your account settings.

Update: You can update your account information through your account settings.

Delete: You can delete your account at any time. This will permanently delete your data, including your account information and all associated QR codes and scan data, subject to the short cleanup window described in section 4.4. This action cannot be undone.

Manage Cookies: You can change or withdraw your cookie consent at any time using the cookie preferences controls in the application.

Opt-out: You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.

8. International Data Transfers

Prime Apps is based in Armenia. Your data is stored in the United States on AWS servers, and our service providers may process data in other countries. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

Wherever you are located, we ask for your consent before setting non-essential cookies, and you can exercise the access, correction, deletion, and consent-withdrawal rights described in section 7 through your account settings or by contacting us. If you are located in the European Union and have a request regarding your personal data that cannot be completed through your account settings, contact us at the address below and we will respond.

9. Third-Party Links

QR codes created through our Service may redirect to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

See also our Terms & Conditions and Cookie Policy.

By using Prolinks, you acknowledge that you have read and understood this Privacy Policy.