Privacy Policy

QR-Powered Identity ("we," "us," "our") operates QR-Powered Identity™, a platform that lets home service companies dispatch technicians with QR-code identity verification. This policy explains what personal information we collect, why, and what you can do about it.

This policy covers three kinds of people: Avatars (the businesses that sign up and their dashboard users), Technicians (employees an Avatar adds to their team), and Homeowners (the end customers who receive a dispatch notification and interact with a technician's QR badge).

Information we collect

From Avatars (business accounts):

• Company name, contact name, email, phone, and website URL provided at signup
• Branding assets you provide or that we extract from your website (logo, colors) for technician-facing pages
• Login credentials, managed by our authentication provider (Supabase) — we never see your password in plain text
• Payment and billing information, processed by Stripe — we do not store full card numbers on our own servers

From Technicians (added by an Avatar):

• Full name, role title, and phone number, entered by the Avatar who employs them
• A unique QR badge and verification token tied to their identity
• Dispatch and arrival activity, including timestamps

From Homeowners (end customers of an Avatar):

• Name, email, and/or phone number, provided by the Avatar dispatching a technician to you
• Service address, used to route the technician and, where enabled, to verify their arrival location against the address on file (geofencing)
• Photographs, only if a technician requests one during a visit and only after you're shown a consent screen and agree — declining is always an option and does not block service
• A record of whether you scanned or verified a technician's QR badge, and when

How we use this information

• Operating the Service: creating dispatches, generating and verifying QR badges, sending notifications
• Verifying a technician has actually arrived at the correct address, where an Avatar has this feature configured
• Billing and account administration
• Responding to support requests and investigating flagged or failed verifications
• Maintaining an internal activity log of account, dispatch, notification, and payment events, for security and troubleshooting
• Legal compliance, and enforcing our Terms of Service

Who we share it with

We don't sell personal information. We share it only with:

• Supabase — database hosting and authentication
• Vercel — application hosting
• Stripe — payment processing
• Twilio — SMS text message delivery
• Resend — transactional email delivery
• Google Maps Platform — address autocomplete and geocoding, when an Avatar's account has this configured
• Law enforcement or regulators, only when legally required to

An Avatar's technicians and homeowners' information is visible to that Avatar's own account — it is not shared with other Avatars on the platform.

Your choices

• Homeowners can decline a photo request at any time without affecting service
• Avatars can remove a technician from their team, which deactivates that technician's badge going forward (past job history is retained for record-keeping)
• You can request a copy of, correction to, or deletion of your personal information by contacting us — see below

Data retention

We keep account and dispatch records for as long as an account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. Photos are retained as part of the dispatch record they belong to unless you request deletion.

Children

The Service is not directed at, and we do not knowingly collect information from, anyone under 18.

Changes to this policy

We may update this policy as the Service changes. We'll update the date at the top of this page when we do.

Contact us

Questions about this policy, or requests to access, correct, or delete your information: legal@qr-poweredidentity.com