Privacy Policy

Account information

Your email address, name, and password (stored securely, hashed, by Supabase Auth — we never see it in plain text).

QR code data

The name, destination (URL or UPI ID), colors, module shape, and logo you set for each QR code you create.

Scan data

Each time a QR code is scanned, we log an approximate location (country, region, city — derived from IP address, not GPS), device type, browser, operating system, referrer, and timestamp. We do not log the scanning visitor's name, email, or any other identifying information — scan records aren't linked to a person, only to the QR code that was scanned.

Payment data

Payments are processed by Cashfree, which requires a phone number to process a payment — we store it against your account and reuse it for future purchases so you're not asked again. We also store the payment ID, amount, and status — never your card, UPI, or bank account details, which Cashfree handles directly.

• To provide the Service — generate QR codes, record and display scan analytics
• To manage your account, plan, and billing
• To send account-related emails (confirmation, trial reminders, receipts)
• To maintain security and prevent abuse of the Service

We don't sell your data, and we don't use it for advertising.

We rely on the following services to run Linkxy, each of which processes data on our behalf:

• Supabase — database, authentication, and file storage
• Cashfree — payment processing
• Resend — transactional email delivery
• ip-api.com — IP-to-location lookups for scan analytics

We use a small number of essential cookies to keep you signed in (via Supabase Auth). We don't use advertising or tracking cookies.

Scan history is kept for 14 days on the Free plan and indefinitely on Premium (until you delete the QR code or your account). Account data is kept until you delete your account, at which point your profile, QR codes, and scan history are permanently removed.

You can access and update your account details from your dashboard at any time. To request a full export or deletion of your data, contact us using the details below — we'll act on verified requests within a reasonable time.

Data is encrypted in transit (HTTPS) and access to your account's data is restricted at the database level (row-level security), so only you — and, where applicable, our administrators for support purposes — can access it.

Linkxy is not directed at children under 13, and we don't knowingly collect data from them.

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this Policy or your data? Reach us at privacy@linkxy.fun.