qrez (“qrez,” “we,” “us,” or “our”) provides QR-code menus, ordering, and payment tools for restaurants, cafés, and food trucks (the “Service”). This policy applies to our website and the Service. qrez is operated by Starcode Tech, vl. Karlo Starčević, based in Bukovečki Krč II. 5, Croatia.
Information we collect
We collect the following categories of information:
- Account information — name, email address, and a hashed password when a restaurant owner or staff member registers.
- Business content — restaurant details, menus, item descriptions and prices, table labels, and working hours that you add to the Service.
- Order and transaction data — items ordered, table or pickup reference, order totals, timestamps, and payment status. Card details are handled by Stripe, not by qrez (see below).
- Guest information — when a guest orders, we process their order and, if they choose to receive a receipt, the email address they provide. We process guest information on behalf of the restaurant they are ordering from.
- Device and usage data — IP address, browser type, pages viewed, and similar technical data collected automatically to operate and secure the Service.
- Cookies — see our Cookie Policy.
How we use information
- Provide, operate, and maintain the Service.
- Process orders and payments and deliver receipts and invoices.
- Authenticate users and keep accounts secure.
- Respond to support requests and send service-related communications.
- Monitor, debug, and improve performance, reliability, and features.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and enforce our terms.
Payments
Payments are processed by Stripe. When a guest pays, their card information is collected and processed directly by Stripe under Stripe’s own terms and privacy policy. qrez does not receive or store full card numbers. For restaurants using payouts, funds are settled to the restaurant’s connected Stripe account; qrez may receive a small platform fee. See stripe.com/privacy.
How we share information
We do not sell your personal information. We share it only:
- With service providers that help us run the Service — for example payment processing (Stripe), cloud hosting and databases, and email delivery — under contracts that limit their use of the information.
- Between restaurants and their guests — order and receipt information is shared with the restaurant a guest orders from.
- For legal reasons — to comply with law, respond to lawful requests, or protect the rights, property, and safety of qrez, our users, or the public.
- In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this policy.
Data retention
We keep information for as long as your account is active or as needed to provide the Service. Invoices and transaction records are retained as required for tax, accounting, and legal purposes. We may retain limited information after account closure where necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
Security
We use administrative, technical, and organizational safeguards designed to protect personal information — including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your choices and rights
You may access, update, or delete your account information from within the Service or by contacting us. Depending on where you live, you may have additional rights described below.
California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of your personal information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law. To exercise your rights, contact us at privacy@qrez.app.
Other U.S. state rights
Residents of certain other states may have similar rights to access, correct, or delete their personal information. Contact us using the details below to make a request; we will respond as required by applicable law.
Children’s privacy
The Service is intended for businesses and adults. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
Contact us
Questions about this policy or your information? Email privacy@qrez.app.