Privacy Policy

Last updated: September 2026

1. Introduction

This Privacy Policy explains how EverScans ("we," "us," "our") collects, uses, and protects information when you use our website and services at everscans.com (the "Service"). By using the Service, you consent to the practices described here.

2. Information We Collect

Account information: When you sign up, we collect your name, email address, and username, either directly or via Google OAuth sign-in.

Content you create: QR code destinations, short link destinations, names you assign, and any logos or colors you upload for customization.

Scan and click data: When someone scans your QR code or clicks your short link, we record the approximate device type, browser, operating system, country, and city, based on the request. We do not collect precise GPS location or personally identifiable information about the person scanning.

Payment information: Payments are processed by a third-party payment processor. We do not store your full card details; our payment processor handles this securely on our behalf.

Usage data: We use Google Analytics to understand how visitors use our website, including pages visited and general traffic sources.

3. How We Use Information

Each purpose below is processed on the legal basis noted next to it:

  • To provide, maintain, and improve the Service (performance of our contract with you)
  • To process payments and manage subscriptions (performance of our contract with you)
  • To send transactional emails - confirmations, password resets, plan notifications (performance of our contract with you)
  • To send optional product updates or tips, if you opt in via Settings (your consent, withdrawable anytime)
  • To detect and prevent abuse, fraud, or violations of our Terms (our legitimate interest in keeping the Service secure)
  • To analyze aggregate usage trends and improve our website and product (your consent for analytics cookies, see Cookies below)

4. How We Share Information

We do not sell your personal information. We share data only with:

  • Service providers who help us operate - Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Dodo Payments (payment processing), Google Analytics (website analytics), Google Safe Browsing (checking submitted URLs for malware and phishing before we allow them)
  • Legal authorities, if required by law or to protect our rights and users

5. International Data Transfers

Our service providers - including Supabase, Vercel, and Resend - may process and store data on servers located outside your own country, including in the United States. Where we transfer personal data out of the EU/UK, we rely on the safeguards those providers make available, such as Standard Contractual Clauses, to ensure your data continues to receive an equivalent level of protection.

6. Data Retention

We retain your account data for as long as your account is active. If you deactivate your account, we retain your data for 30 days, after which it is permanently deleted unless you log back in to reactivate. Scan and click data associated with your QR codes and links is retained for as long as the corresponding code or link exists.

7. Data Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS), Row Level Security on our database, and restricted access to sensitive credentials. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data via your Profile settings
  • Request deletion (erasure) of your account and data
  • Receive a copy of your data in a portable format
  • Restrict or object to certain processing of your data
  • Withdraw consent at any time, for anything we process based on your consent (analytics cookies, optional product/marketing emails), without affecting the lawfulness of processing before you withdrew it
  • Opt out of non-essential marketing emails via Settings
  • Lodge a complaint with your local data protection supervisory authority, if you believe our processing of your data violates applicable law

To exercise these rights, contact us at support@everscans.com.

9. Cookies

We use essential cookies to keep you logged in and to remember your session - these don't require a choice, since the site can't function without them. Google Analytics cookies are different: we don't set them until you accept the cookie banner shown on your first visit. Declining means no analytics cookies are set; you can change your choice anytime by clearing your browser's local storage for this site.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We encourage you to review it periodically. Continued use of the Service after changes constitutes acceptance.

12. Contact

Questions about this Privacy Policy can be sent to support@everscans.com.