Loading…
BuildQR - Last updated: 21 September 2026
At BuildQR, we take the protection of your personal data very seriously. This policy explains what data we collect, why we collect it, how we use it and what your rights are.
The data controller for your personal data is:
When you sign up, create a QR code or contact us, we collect:
Our free tools (site document generators — sign-in sheet, hot work permit, goods received note… — and calculators) build your PDF in your browser. The content you enter — names, companies, site addresses — is not sent to us and does not appear in any of our databases.
We do, however, measure how these tools are used, without cookies and without any identifier that would allow us to follow you from one visit to the next. The only information recorded is:
Legal basis: legitimate interest (audience measurement limited to improving our tools).
Voluntary sharing of the form. After you download your document, we invite you to tell us what is missing from the template. Depending on the tool, that message reaches us on its own or together with the form you have just filled in — the box states which of the two applies before you write anything. This submission takes place only if you explicitly click; it is never automatic and is not pre-ticked. The shared content is then kept separately, without your IP address or any session identifier, on the basis of your consent, which you may withdraw at any time by writing to us.
You may withdraw your consent at any time.
For managing your account, creating QR codes, billing subscriptions.
For the newsletter if you sign up for it, and for voluntarily sharing a form from our free tools.
For securing the service, preventing fraud, internal analysis for improvement purposes.
Retention of invoices (10 years), compliance with tax and accounting obligations.
🗑️ You may request the deletion of your account and your data at any time: it becomes final at the end of the 30-day period above (except where legal retention obligations apply).
We do not sell, rent or share your personal data for commercial purposes.
Some data may be transferred outside the European Union — to the United States (AWS, Stripe, Google Maps Platform, and the YouTube or Vimeo players where a scan page displays one) or to the United Kingdom (OpenStreetMap) — under adequacy decisions or with appropriate safeguards (standard contractual clauses). The application runs in Paris, but its host Vercel is an American company: technical data (logs, visitor analytics) may be processed in the United States, with the same safeguards. Emails (Mailjet), their queue (Upstash) and the technical monitoring of errors (Sentry) remain within the European Union.
We may disclose your data if the law requires us to do so (requests from judicial authorities, combating fraud, protecting our rights).
Under the GDPR, you have the following rights:
Obtain a copy of your personal data
Correct inaccurate or incomplete data
Request the deletion of your data
Retrieve your data in a readable format
Refuse certain processing (marketing, etc.)
Restrict the use of your data
Withdraw your consent at any time
Refer the matter to the CNIL (the French data protection authority) if there is a problem
📧 To exercise these rights, contact us at: privacy@buildqr.app
⏰ We undertake to respond within a maximum of one month, as required by the GDPR.
We implement appropriate technical and organisational measures to protect your data:
🚨 In the event of a data breach, we will notify the CNIL within 72 hours, and we will inform you without undue delay if it is likely to result in a high risk to your rights and freedoms.
We set only cookies that are strictly necessary for the service to function. We use no audience measurement, advertising or third-party tracking cookies: that is why no consent banner is shown to you.
Necessary for the service to function. They cannot be disabled.
We count traffic to our public pages with Vercel Web Analytics, which sets no cookies: the visitor is identified by a hash calculated from the request, never kept beyond 24 hours.
As strictly necessary cookies are exempt from consent (GDPR and the CNIL's recommendations), we do not display a banner. You can delete or block them from your browser settings: disabling essential cookies will, in particular, prevent you from staying signed in.
We may need to update this privacy policy to reflect:
📧 We will inform you of any significant change by email or via a notification on our site.
The version in force is always available on this page with the date it was last updated.
For any question about this privacy policy or the protection of your personal data:
We have not appointed a data protection officer: your requests are handled directly by the data controller, at privacy@buildqr.app
Subject: "GDPR - Request"
If you are not satisfied with our response, you may refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés):www.cnil.fr
For any question about this policy or the protection of your data