Privacy Policy (GDPR)

Last update: October 2026

The privacy of your personal data is one of the main priorities for InventarQR (administered as a PFA / authorized physical person under Romanian legislation, email: contact@inventarqr.ro).

This Privacy Policy describes how we collect, use, process, and protect your data when you access our website, log into the platform, place an order, or use the control panel (Dashboard) to manage your boxes and QR codes.

By using the InventarQR platform, you confirm that you have read and agree to the provisions of this document.

1. Data Processing Principles (GDPR)

We comply with Regulation (EU) 2016/679 (GDPR) and process personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency: We collect data only for legitimate and clear purposes.
• Data minimization: We strictly request the information necessary for the functioning of the service.
• Accuracy and security: We ensure that data is kept secure and up to date.

2. What types of data do we collect?

• Identification Data (Google OAuth): When you log in with your Google account, we receive your email address and name strictly to create your unique profile and associate your codes.
• Billing and Payment Data: Bank card data is never stored on InventarQR servers; it is processed securely by the accredited third-party payment processor (e.g., Stripe / Gumroad).
• Delivery Data (for physical packages): Postal address and contact phone number.
• User-Entered Content: The descriptions and texts you voluntarily enter into the control panel. (Note: This content is 100% Private and AI-free).
• Technical and Traffic Data (Logs): IP address, browser type, device used (used exclusively for security and optimization).

3. Legal basis for processing

• Performance of a contract: To deliver the ordered packages and provide the WMS dashboard.
• Compliance with a legal obligation: Issuing tax invoices.
• Your consent: When you voluntarily log in with Google.
• Legitimate interest: IT security and fraud prevention.

4. Who do we share your data with?

InventarQR does not sell, rent, or transfer your personal data to third parties for marketing purposes. Data may be shared exclusively with:

• Online Payment Processor (Stripe / Gumroad): For secure transactions.
• Courier Service Providers: Only for physical orders.
• Hosting Service Providers: To ensure the non-stop operation of the platform.

5. How long do we keep the data?

• Account and order data: For the entire duration of your account's existence.
• Financial documents: For 10 years in accordance with the law.

6. Data Security and Your Rights

We implement appropriate technical and organizational measures (SSL/TLS encryption) to protect your data. Under GDPR, you have the right of access, rectification, erasure, restriction, portability, and object. Contact us at contact@inventarqr.ro to exercise them.