Privacy Policy
We explain how we process data and handle data subject requests.
Security Center
How QR Plus protects its services, processes data and participates in business assessments.
Controls and processes
Our practices for protection, operations and business requirements.
Communication protectionWe protect communications with HTTPS and request checks.Public document
Accounts and permissionsWe validate identities, sessions and authorization for protected resources.Information on request
Secure developmentWe validate inputs and restrict operations outside application contracts.Information on request
Failures and security incidentsWe record failures and rejected requests to support technical investigation.Public document
Vendor managementWe assess providers according to their role and access to service data.Information on request
Personal data processingWe process data according to platform purposes and responsibilities.Public document
Data processing agreementWe review and formalize processing responsibilities during contracting.Information on request
Retention and deletionWe handle retention and deletion according to purpose and applicable obligations.Public document
Subprocessors and data locationWe identify providers and data flows relevant to the engagement.Information on request
Data subject rights and requestsWe receive and review privacy requests through official channels.Public document
Backups and recoveryWe handle copies and restoration within each environment’s technical scope.Information on request
Recovery and continuityWe assess failures by component and prioritize recovery of the affected service.Information on request
Availability and capacityWe apply usage limits and operational conditions by feature and plan.Public document
Support and escalationWe route issues for review according to impact and the affected feature.Public document
Printed QR continuityWe manage continuity of services associated with dynamic QR Codes.Public document
Redirects and domainsWe associate destinations and domains with account resources and conditions.Public document
Analytics privacyWe handle records and metrics according to the service and Privacy Policy.Public document
Abuse preventionWe enforce request safeguards and handle reports of misuse.Public document
Policies and responsibilitiesWe maintain public security, privacy and operational guidelines.Public document
Risk managementWe assess requirements and dependencies before making specific commitments.Information on request
People and responsibilitiesWe handle access and confidentiality according to each activity’s responsibility.Information on request
Due diligence and technical evidenceWe respond to due diligence with technical information tied to the assessed service.Information on request
Corporate and tax documentationWe organize corporate and tax documentation for supplier qualification.Information on request
Financial documentationWe handle financial information through restricted channels for contracting.Information on request
Integrity and conductWe assess conduct, confidentiality and integrity requirements during contracting.Information on request
Business contracts and obligationsWe formalize the scope and responsibilities applicable to the contracted service.Information on request
Documents and evidence
Our documentation brings together service practices and information for business assessments.
Terms of Use
We establish the scope and conditions of QR Plus services.
Security Guidelines
We describe protections applied to communications and resources.
Data Protection
We detail data processing and operational responsibilities.
Operations, Continuity and Support
We describe how we handle operations, continuity and support.
QR Codes and Campaigns
We explain how we manage codes, destinations and campaign conditions.
Technical Security Assessment
We handle technical requirements and sharing of applicable evidence.
Continuity Information
We detail service dependencies and recovery conditions.
Due Diligence and Audit Requirements
We respond to due diligence for the assessed product and scope.
Data Processing Agreement
We formalize processing responsibilities and contractual conditions.
Supplier Qualification Documents
We organize corporate, tax and financial documents for supplier qualification.
Security and Supplier Questionnaire
We respond to security questionnaires and internal procurement processes.
No documents found. Try another search or filter.
How to request access
Select documents
Tell us what your team needs to assess and the requesting company.
Review and confidentiality
The scope is reviewed and, when needed, a confidentiality agreement is established.
Authorized access
Approved evidence is shared with the assessment team through controlled access.
A document set for your supplier assessment
QR Plus participates in supplier qualification processes and handles requests for business documentation. Share your assessment scope so we can align the necessary documents, clarifications and conditions.
Does your company use its own questionnaire?
Contact us to request completion of your security questionnaire, supplier registration or internal process. Our team can work with procurement, technology, privacy and compliance teams to align scope and requirements before contracting.
External checks
Additional checks on the domain certificate and reputation.
HTTPS certificateCheck certificate installation and validity. Google Safe BrowsingCheck threats identified by Google.
These checks have a specific scope and do not replace assessment of controls and documents.
We use HTTPS to protect data in transit between the browser and platform. In applicable operations, we check request validity and required authorization, reducing improper calls and processing of information incompatible with the feature used.
We record technical events to support platform failure analysis. Handling considers the affected service, context and observed impact, directing explanations and appropriate measures to the responsible team with communication through official channels.
We process registration, authentication, billing, security and support data to operate QR Plus services. Processing follows the purposes and responsibilities described in the Privacy Policy, distinguishing operational data from content added to campaigns.
We apply the retention and deletion criteria set out in the Privacy Policy and Terms of Use. Handling distinguishes accounts, content, operational records and copies, considering purpose, retention obligations and the technical conditions of each information set.
We receive data subject requests through official channels and review the requester’s identity, the data involved and QR Plus’s processing responsibility. Responses consider applicable rights and the handling conditions described in the Privacy Policy.
We control resource usage through rules and limits applicable to the service and plan. Operations distinguish the dashboard, generation, redirects and integrations so capacity and dependencies can be handled by component; specific availability commitments are formalized contractually.
We centralize support through official channels and route each issue according to the feature, impact and required analysis. Operational, privacy and contractual questions receive the corresponding handling, with follow-up through the contacts recorded in the request.
We manage dynamic QR Codes as resources linked to the account, plan and service conditions, maintaining the association between the code and platform-hosted content. We distinguish that operational lifecycle from static codes, which carry the encoded information directly.
We manage the association between dynamic QR Codes, destinations and domains according to the feature and responsible account. Resolution uses service configuration and usage conditions; destination changes are handled by supported features while preserving the distributed code image.
We handle scan records and metrics according to the feature used and purposes described in the Privacy Policy. We distinguish QR Plus operational data from processing by external destinations, relating retention and access to each service’s context.
We apply request validation, usage limits and mechanisms against improper automation in protected flows. We handle reports of fraud, phishing and unlawful content through official channels, with review and resource restrictions under the Terms of Use.
We consolidate service use, data processing and protection rules in public QR Plus documents. These guidelines organize operational responsibilities and support channels, while internal information and specific commitments follow access review and separate formalization.