Privacy Policy

When you use WishQR to create a birthday page, we collect the following information that you voluntarily provide:

• Recipient's name and age
• A personalized birthday message
• Any other content you enter into the birthday page generator

This data is stored in our database (MongoDB) to generate and serve your personalized birthday page via a unique shareable link. We do not require you to create an account, and we do not collect payment details, government IDs, or sensitive personal information.

We may also automatically collect limited technical data such as browser type, device type, IP address, and pages visited — solely for analytics and security purposes.

We use the information we collect to:

• Generate and display your personalized birthday QR page
• Serve the page when the unique link is accessed
• Improve our service through anonymized analytics
• Display relevant advertisements via Google AdSense
• Prevent abuse and ensure the security of our service
• Process payments and send transaction confirmation emails

We do not use your data for automated decision-making, profiling, or any purpose beyond operating and improving this service.

We use the following types of cookies on WishQR:

You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our site. For more information, visit aboutcookies.org.

Birthday page data you submit (name, age, message) is stored in our secure MongoDB database hosted on MongoDB Atlas. This data is retained to serve your unique birthday page link.

If you wish to have your data deleted, please contact us at support@wishqr.com with your page link and we will remove it within 7 business days.

We implement reasonable technical and organizational measures to protect data against unauthorized access, alteration, or deletion.

We process personal information only when we have a valid legal basis to do so, including:

• Your consent
• Performance of services requested by you
• Compliance with legal obligations
• Legitimate business interests such as website security and analytics

The birthday pages you create are accessible to anyone who has the unique link. By sharing the link, you are making that page publicly accessible. Please share only with people you trust. WishQR does not publicly list or index birthday pages and does not sell or share the data you provide with third parties, except as described in this policy.

When you purchase a Premium wish page, your payment is processed by Razorpay Software Private Limited. WishQR does not store your card number, CVV, bank account details, or any other sensitive payment credentials. All such data is handled exclusively by Razorpay in accordance with PCI-DSS standards.

We store only the following payment-related data in our database, solely for order fulfilment, receipt delivery, and dispute resolution:

• Your email address (entered at checkout)
• Razorpay Order ID and Payment ID
• Payment amount and currency (INR or USD)
• Payment status (created / paid / failed)
• A snapshot of the wish page form data submitted at the time of payment

For Indian users, payments are accepted in INR via UPI, cards, net banking, and wallets. For international users outside India, payments are accepted in USD via PayPal, facilitated through the Razorpay checkout. PayPal may collect additional data as per their own privacy policy.

By completing a payment, you also agree to Razorpay's Privacy Policy and PayPal's Privacy Policy (for international payments).

Upon successful payment, WishQR sends a confirmation email to the address you provided at checkout. This email contains your wish page link and payment receipt details. We use this email address solely for transactional communication related to your order. We do not add you to any marketing mailing list without your explicit consent.

We use the following third-party services, each governed by their own privacy policies:

• Google AdSense — Advertising. Google Privacy Policy
• MongoDB Atlas — Database hosting. MongoDB Privacy Policy
• Vercel — Hosting and analytics. Vercel Privacy Policy
• Razorpay — Payment processing (INR). Razorpay Privacy Policy
• PayPal — International payment processing (USD). PayPal Privacy Policy

Our service providers may store or process information in countries outside your country of residence. By using WishQR, you acknowledge and consent to such transfers where permitted by applicable law.

We implement industry-standard administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

However, no method of electronic storage or internet transmission is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Opt-out: Opt out of personalized advertising at any time

To exercise any of these rights, email us at support@wishqr.com.

Some browsers provide a "Do Not Track" feature. Because there is currently no universally accepted standard for responding to such signals, WishQR does not currently respond to Do Not Track requests.

We may display personalized and non-personalized advertisements through Google AdSense and other advertising partners. Advertising providers may collect information through cookies and similar technologies to provide relevant advertising and measure campaign effectiveness.

WishQR is intended for use by adults (18 years and older) to create birthday pages on behalf of others, including children. We do not knowingly collect personal information directly from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@wishqr.com and we will delete it promptly.

Birthday messages, names, and related content submitted by users may remain stored while the associated birthday page remains active. Users may request removal of their content by contacting support@wishqr.com.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of WishQR after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: support@wishqr.com
Website: wishqr.in/contact
Business / Partnerships: partners@wishqr.in

If you have any questions regarding this Privacy Policy or your personal information, please contact: