Privacy Policy

Last updated · May 2026

Who we are

For company details and contact information, see our Impressum. This policy covers both our marketing website and the Smart QR Immo application. We do not sell your data and do not engage in behavioral advertising.

Website visitors

Our marketing website is hosted on the Cloudflare network. We use no third-party analytics on the marketing site at this time. If we add a privacy-respecting analytics tool in the future, we will list it here before turning it on.

We only use essential cookies necessary for the website to function. No marketing or tracking cookies are used.

Broker account information

When you create an account, we collect:

Your name
Your work email
Your agency details (name, address, listing platform if applicable)

EU brokers: this information is stored on servers in Frankfurt. US brokers: stored in us-east-1. You pick at signup.

Payment information

Payments are processed by Stripe. We do not store your card details. Stripe handles all payment data directly and is certified as a PCI Level 1 Service Provider.

Buyer data on the exposé passes you issue

When a buyer scans the QR on your yard sign or storefront and adds an exposé pass to their wallet, the following data may be stored:

Anonymous device tokens used to deliver pass updates
Pass usage data (scans, opens, tap-through to your forms or call link)
Coarse signal of which sign or surface the pass was added from

You are the data controller for any end-buyer data you choose to collect through a linked form. We process the wallet-side data on your behalf as a data processor. Smart QR Immo is designed so that buyers are not asked for an email or phone number — passes are tokenized. The buyer opts in by tapping “Add to Wallet”; they remove the pass to withdraw.

Wallet push notifications

To deliver updates to wallet passes (price changes, new open days, day-5 check-ins), we use Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM). These services receive device tokens to deliver notifications but do not have access to pass content.

Email communication

Transactional emails (account verification, password resets, receipts)
Product updates and tips (you can unsubscribe anytime)

Error tracking

We use a third-party service to monitor our application for errors and to improve reliability. Error reports may include technical information about your browser and the actions that led to an error.

Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data, except where we need to retain certain information for legal or accounting purposes.

Your rights (GDPR & CCPA)

You have the right to:

Access your personal data
Correct inaccurate data
Delete your data
Export your data
Object to processing
Withdraw consent for marketing emails
(US) Opt out of any sale or sharing of personal information — we do neither

Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with a data protection authority.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.