Privacy Policy

1. Executive Overview & Scope

FlexQR ("Platform", "we", "us", or "our"), operated by Tensity Group, provides dynamic QR code redirection, logo customisation, and custom domain routing services. This Privacy Policy details how we collect, process, store, and protect personal data across our services in strict compliance with global privacy regulations including GDPR, POPIA, and CCPA/CPRA.

2. Data We Collect & Processing Purposes

We do not install intrusive tracking cookies or fingerprint end-users who scan your generated QR codes. Scan processing is performed exclusively for real-time URL redirection and aggregated metrics counting.

3. Legal Bases for Data Processing

We process personal data strictly under valid legal bases:

• Contractual Necessity: Operating account credentials, custom domain routes, and dynamic link redirects.
• Legitimate Interests: Dual-key rate limiting (IP/Email), honeypot anti-spam defense, and brute-force prevention.
• Legal Obligation: Fraud prevention, abuse mitigation, and compliance with court directives.

4. Data Storage & Isolation

All database records are isolated in segregated production database schemas. Backups are encrypted and stored off-site via encrypted cloud storage and purged automatically according to retention policies.

5. Third-Party Sub-Processors

We restrict data sharing to vetted operational infrastructure providers required to deliver the platform:

• Edge Security & DNS: Cloudflare WAF & Turnstile Bot Mitigation.
• Payment Processing: Stripe (Financial credentials are processed directly by PCI-DSS Compliant gateways and never touch our servers). Charges reflect as TENSITY GROUP.

6. Your Global Data Rights

Under applicable data privacy regulations, you hold the following rights regarding your personal information: