This policy explains what ScanOrbit collects, why, who else handles it, and how you can take it out or delete it. Where something is a limitation rather than a strength, it says so.
1. Information we collect
From you: your name, email address and (unless you sign in with Google) a password, plus what you put into the product: QR code destinations, page content, images, business cards, team members you invite, and settings.
From running the service: sign-in times, and a record of changes made to your account (the audit log, viewable on the Business plan). We don't run third-party analytics or advertising scripts in the dashboard.
From people who scan your QR codes: see "QR scan data" below.
2. How we use your data
To run ScanOrbit: signing you in, redirecting your dynamic QR codes, hosting your pages, showing your analytics, sending the emails you ask for (invites, receipts, lead alerts, weekly digests) and billing you.
We do not sell personal data, and we don't use it for advertising.
3. Who else handles your data
A small number of providers run parts of the service for us: Vercel (website and scan redirects), Supabase on Amazon Web Services in the United States (database, sign-in, files and backend), Brevo (email), Razorpay (payments) and, only if you choose it, Google (sign-in). The full list, with what each one receives and where, is on our Subprocessors page (scanorbit.app/subprocessors).
Card and bank details are entered on Razorpay's payment page and handled by Razorpay; ScanOrbit never receives or stores full card numbers.
4. QR scan data
When someone scans one of your dynamic QR codes, we record the time, device type, operating system, browser, and approximate location (country and city). This appears, aggregated, in your analytics.
Location is worked out by our hosting provider's network from the visitor's IP address as part of handling the request; we don't send visitor IP addresses to any separate location service. We don't store visitors' IP addresses in readable form: a one-way hash of it is kept only to tell repeat scans from new ones.
5. Cookies
ScanOrbit uses only the cookies and browser storage needed to keep you signed in and remember dashboard preferences. We don't set advertising or cross-site tracking cookies.
If a Pro or Business account holder adds their own retargeting pixels (such as Google Tag Manager, Meta Pixel or TikTok Pixel) to their QR codes, those scripts run on that account holder's scan pages under their control. The account holder is responsible for telling their visitors and getting any consent their local law requires.
6. Your rights: access, export and deletion
You can download everything in your account as one file, and delete your account yourself, from Settings → Security → Your data. Deletion takes effect immediately.
Wherever you live, you can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing hello@scanorbit.app. People in the EU and UK have these rights under the GDPR.
7. How long we keep data
We keep your data while your account exists. When you delete your account, its data is deleted straight away, except invoices and payment records, which tax and accounting law requires us to keep.
Scan analytics are aggregated counts; we may keep anonymous totals that can't be tied back to a person.
8. Security
Traffic is encrypted in transit (HTTPS), and our database provider encrypts data at rest. Passwords are hashed by our sign-in provider and never stored in readable form. Two-factor authentication is available to every account. More detail, including what we don't have yet (such as SOC 2), is on our Security page (scanorbit.app/security).
To report a vulnerability, email hello@scanorbit.app.
9. Changes to this policy
If we make a material change, we'll tell you by email or in the dashboard and update the date at the top. Continuing to use ScanOrbit after that means you accept the updated policy.
10. Contact
For any privacy question, email hello@scanorbit.app.
Corporate offices: ScanOrbit, Newark, CA 94560, United States. ScanOrbit, Bengaluru, Karnataka 560068, India.
Questions regarding Privacy Policy?
hello@scanorbit.app