Privacy Policy

Who is responsible

For people in India, the Data Fiduciary for merchant accounts, verification, and platform billing is NexaChip Solution LLP, the entity named on India invoices.

For people in Saudi Arabia, the controller for platform packs and invoices is Prime Arabia Company Ltd, 2955 Makkah Almukarama Branch, Al Olaya District, Riyadh 12611, VAT 312150220100003. Write to info@primegrps.com.

When a diner places an order, the merchant is responsible for that order. WhatsQR stores the order so the merchant can prepare it, and shows the diner’s mobile, name, and delivery location to that merchant.

What we collect

Merchant account: the email you sign in with, and your Google name and photo if you use Google. There is no password.

Business verification: contact name and mobile, tax and establishment numbers, shop address and map location, and the photo identity and trade licence you upload. Those files stay in a private store that only review staff can open.

Payments: a UPI ID if you add one for India orders, pack purchases, and the tax details printed on an invoice. Card and bank numbers are handled by the payment company.

Diner orders: mobile number, optional name, delivery address, and precise location (latitude and longitude) when the order is for delivery. The mobile is also the key for that person’s recent orders.

QR scans: a view record with a device fingerprint and a short hash of the IP address, not the full address. If you allow it, we also store city, region, country, browser, operating system, device type, and language.

Alert QR: a short hash of the device or IP so the same scan is not charged twice. The full IP address is not stored on the alert record.

App followers: a device identifier and push token when someone follows an Alert QR in the app.

Enquiries: name, email, phone, country, and message from the contact form.

Why we use it

We use this information to run WhatsQR: sign-in, verification, hosting public pages, counting views you have paid for, sending sign-in codes and order notices, taking payment for packs, issuing tax invoices, and answering support.

A diner’s mobile is used so the merchant can reach them on WhatsApp about that order, when they agree. Precise location is used to check the delivery distance and to show the merchant where to deliver.

City and device details on a scan are for the merchant’s analytics. They are separate from the count needed to run the service. You can refuse those details and we still count the visit. They are deleted after 90 days.

Who else receives it

We do not sell personal data.

The merchant receives the diner’s order, including mobile, name, address, and location.

Processors: Google Firebase for hosting, database, files, and sign-in, in Singapore (asia-southeast1); Resend for email; Razorpay for pack payments in India; MyFatoorah for Saudi Arabia and other countries, including USD; and a geo lookup that turns an IP into a city only when analytics details are allowed.

WhatsQR staff can see what they need to review verification, support an account, or answer a grievance. We also share information when the law requires it.

Storage outside your country

Orders, verification files, view logs, and account data are stored on Firebase in Singapore.

India’s Digital Personal Data Protection Act, 2023 allows a transfer unless the Government of India restricts that country. Hosting in Singapore is disclosed here. It is not, by itself, treated as a breach of that Act.

Saudi Arabia’s Personal Data Protection Law is stricter. Storing personal data of people in the Kingdom on servers in Singapore is a transfer outside the Kingdom. WhatsQR does not treat that hosting as a sufficient transfer. An adequacy decision, SDAIA approval, standard safeguards, or a narrow contract exception has to be confirmed with counsel before this transfer is treated as enough. Analytics copies of Saudi personal data are not covered by the hosting choice. The product does not show a PDPL compliant badge.

How long we keep it

View logs, and the short records used to avoid charging the same scan twice, are deleted after 90 days.

Tax invoices and the order totals they depend on are kept for the period tax law requires in the invoice’s country. Erasing a diner’s mobile, name, and location does not delete those totals.

Verification files and merchant account records stay while the account is open, and for the period needed for tax, fraud, and disputes after it closes. Contact-form messages are kept long enough to answer them.

Access, correction, and erasure

You can correct merchant profile and menu data in the portal. The verified owner can close the account from Settings. Closing stops the shop. Tax invoices and verification files are kept for the legal period.

A diner can ask the merchant, or WhatsQR support, for a copy of orders tied to their mobile, or for the mobile, name, address, and location to be removed. Staff can export or erase those fields. The tax invoice record stays.

You can refuse a later WhatsApp message by not placing another order, or by asking for erasure. That does not undo an order the merchant is already preparing.

To nominate someone to act for you, write to the grievance contact and we will record it against the account.

We aim to answer a grievance within 30 days, and sooner where the law sets a shorter time. This notice does not replace a filing with the Data Protection Board of India or with SDAIA.

Children

Merchant accounts are not for children. Do not place an order with a child’s mobile number or location. We do not knowingly take a child’s data. If you believe we have, write to the grievance contact and we will delete it.

Grievance contact

India: NexaChip Solution LLP, +91 9292169988, or the contact form on this site.

Saudi Arabia: Prime Arabia Company Ltd, info@primegrps.com, +966 549848664.

Merchants who can sign in can also use Support in the portal.