Privacy Policy

This policy is issued by Davis Noe Perez Ugarte, a Mexican individual carrying out business activity (Persona Física con Actividad Empresarial, RFC: PEUD810924TX3), operating under the trade name QR-Powered Identity ("we," "us," "our"). We operate QR-Powered Identity™, a platform that lets home service companies dispatch technicians with QR-code identity verification. This policy explains what personal information we collect, why, and what you can do about it.

This policy covers three kinds of people, defined in the Definitions section of our Terms of Service: Avatars (the home service companies that sign up for and pay for the Service, and their dashboard users), Technicians (an Avatar's own employees or contractors, added to that Avatar's account, who receive a QR badge), and Homeowners (an Avatar's own end customers, who receive a dispatch notification and interact with a Technician's QR badge). Homeowners never sign up for or pay for the Service.

Information we collect

From Avatars (business accounts):

• Company name, contact name, email, phone, and website URL provided at signup
• Branding assets you provide or that we extract from your website (logo, colors) for technician-facing pages
• Login credentials, managed by our authentication provider (Supabase) — we never see your password in plain text
• Payment and billing information, processed by Stripe — we do not store full card numbers on our own servers

From Technicians (added by an Avatar):

• Full name, role title, and phone number, entered by the Avatar who employs them
• A unique QR badge and verification token tied to their identity
• Dispatch and arrival activity, including timestamps
• Vehicle make, model, color, and license plate, if the technician chooses to provide them during onboarding — shown to a homeowner only when they have a real, confirmed dispatch with that technician, never on a general scan of the badge by anyone else. Whoever owns the vehicle — the technician, or the Avatar if it's a company vehicle — is responsible for having the right to share it, and providing it is treated as that consent.

From Homeowners (end customers of an Avatar):

• Name, email, and/or phone number, provided by the Avatar dispatching a technician to you
• Service address, used to route the technician and, where enabled, to verify their arrival location against the address on file (geofencing)
• Photographs, only if a technician requests one during a visit and only after you're shown a consent screen and agree — declining is always an option and does not block service. A second, separate, optional checkbox on that same screen lets you additionally allow the Avatar to use those photos, along with any comments you leave about your visit, in their own marketing (for example, social media or their website) — declining that second checkbox also never affects your service, and it's entirely independent from the first
• Any comments you choose to leave about your visit, on the job summary page after service is complete — this is always optional and separate from the photo consent screen above
• A record of whether you scanned or verified a technician's QR badge, and when

How we use this information

• Operating the Service: creating dispatches, generating and verifying QR badges, sending notifications
• Verifying a technician has actually arrived at the correct address, where an Avatar has this feature configured
• With your separate, optional consent: letting the Avatar who dispatched the technician use your before/after photos and any comments you leave about your visit in their own marketing materials
• Billing and account administration
• Responding to support requests and investigating flagged or failed verifications
• Maintaining an internal activity log of account, dispatch, notification, and payment events, for security and troubleshooting
• Legal compliance, and enforcing our Terms of Service

Who we share it with

We don't sell personal information. We share it only with:

• Supabase — database hosting and authentication
• Vercel — application hosting
• Stripe — payment processing
• Twilio — SMS text message delivery
• Resend — transactional email delivery
• Google Maps Platform — address autocomplete and geocoding, when an Avatar's account has this configured
• Law enforcement or regulators, only when legally required to

An Avatar's technicians and homeowners' information is visible to that Avatar's own account — it is not shared with other Avatars on the platform.

Your choices

• Homeowners can decline a photo request, skip leaving a comment, or decline the separate marketing-use permission, at any time without affecting service
• If you agreed to let your photos and/or comments be used in an Avatar's marketing, you can withdraw that permission at any time by contacting us — see below
• Avatars can remove a technician from their team, which deactivates that technician's badge going forward (past job history is retained for record-keeping)
• You can request a copy of, correction to, or deletion of your personal information by contacting us — see below

Data retention

We keep account and dispatch records for as long as an account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. Photos are retained as part of the dispatch record they belong to unless you request deletion.

Children

The Service is not directed at, and we do not knowingly collect information from, anyone under 18. No one under 18 may create an account, sign up for, or purchase the Service — see the eligibility requirements in our Terms of Service. If we learn that we've collected information from someone under 18 in connection with an account, we'll take reasonable steps to delete it and close the account.

Changes to this policy

We may update this policy as the Service changes. We'll update the date at the top of this page when we do.

Contact us

Questions about this policy, or requests to access, correct, or delete your information: legal@qr-poweredidentity.com