Privacy Policy

Your Privacy Matters

At SurpriseQR, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our service to create and share digital surprises.

Information We Collect

When you create a surprise, we collect:

• Sender name (optional)
• Receiver name
• Your message content
• Uploaded images or videos
• Theme and customization preferences
• Payment information (processed securely by Razorpay)

How We Protect Your Data

• All URLs are unguessable UUIDs - nobody can find your surprise by browsing
• Surprises are not indexed by search engines
• Password protection is available for premium users
• All connections are encrypted via HTTPS
• Media files are stored securely and not publicly browsable

Data Retention

Your surprises are automatically deleted after their expiry period:

• Basic plan: 30 days after creation
• Premium plan: 90 days after creation

Once deleted, all associated data including messages and media files are permanently removed from our servers.

Payment Security

We do not store your payment card details. All payments are processed securely through Razorpay, a PCI-DSS compliant payment processor.

Contact

If you have any questions about our privacy practices, please contact us at privacy@surpriseqr.com.