Privacy Policy
PGI Enterprises TX LLC operates ReviewRelayQR.com. This policy describes information used by the free QR generator and the paid account, tracking, and billing features.
Free QR generator
The free generator creates static QR codes in your browser. The destination and display name you enter are not sent to ReviewRelayQR to generate the code. When you visit the website, the hosting service may process basic request and security information such as an IP address, browser details, and access time.
Business accounts and payments
If you create an account, we process your email address, authentication state, business name, selected industry and timezone, account role, and support communications to provide and protect the service. Firebase Authentication supports account sign-in and verification. Stripe processes checkout, payment methods, invoices, and subscription management. We receive identifiers and billing status needed to provide access; we do not store full card numbers.
Tracking and reports
For paid dynamic links, we process the code, destination, placement and channel labels, redirect requests, timestamps, and limited technical signals to operate links, filter obvious automated traffic, and create reports. A request is not proof of a unique visitor, completed review, booking, or purchase. Do not put patient names, health details, or other sensitive personal information in code labels or destinations. We do not ask your customers to submit review text to us.
Branded pages and optional contact sharing
Branded pages record page views, button-click times, a short-lived random page-visit identifier, and approximate device type, operating system, and browser family derived from request headers. Our analytics events do not contain raw IP addresses, full browser headers, names, or emails. Device classifications can be incomplete or inaccurate. Hosting and security logs may contain request metadata. We do not collect GPS coordinates or infer a visitor’s city in this release.
If a business enables the optional contact form, a visitor may voluntarily share their name and email, with explicit permission to share their page activity with that business for feedback follow-up. Leaving a review does not require submitting this form. Contact sharing is not a marketing subscription. Authorized business owners and managers can view and delete submitted details. A visitor may optionally indicate that they left a review; this is a self-report, not verification by Google. Review submission happens on the linked provider’s website under that provider’s policies.
How we use and share information
We use information to operate accounts and links, deliver reports, take payments, prevent abuse, answer support requests, and meet legal obligations. We use service providers, including Google Cloud/Firebase for hosting, authentication, and data processing and Stripe for payments and billing. These providers process information to deliver their services. We do not sell customer contact lists. We do not infer a visitor’s name or email from an anonymous scan. If a visitor voluntarily shares contact details, the business can see those details alongside that page visit’s review-link click time and any visitor-reported completion. These signals do not verify a Google review or a match to a public reviewer.
ReviewRelay website analytics
With your optional analytics permission, we measure visits, traffic-source tags, page and feature interactions, approximate device type, and broad error categories on ReviewRelay’s own website. A random browser identifier lasts up to 30 days and a session lasts 30 minutes. We honor Global Privacy Control and Do Not Track for this optional collection. Use Analytics preferences to change your choice. We do not record form contents, passwords, QR destinations, card details, or full referring URLs in these events. Do not place personal information in campaign tags.
We also use account creation, verification observed on return, workspace setup, verified billing events, and product milestones for service and business reporting. If you sign in, we may link a consented visit to a pseudonymous account identifier. Authorized PGI owners and scoped reporting integrations can review aggregate reports; reporting tokens do not expose individual visitor identities or grant account or billing changes. Warehouse event partitions expire after 90 days. Operational records, delivery records and backups can have separate retention.
Retention and security
Page-visit tokens expire after 24 hours and optional contact records expire after 90 days. Expired records are hidden and queued for deletion by our recurring cleanup worker; deletion can be delayed during outages or backlogs. Analytics warehouse partitions have a 90-day retention period. Infrastructure logs, backups, and operational delivery records may have separate retention. Contact details may be deleted sooner by the business or through a request to our support email.
We keep information for as long as needed to provide the service, resolve issues, and meet legal or accounting requirements. After a subscription ends, the account may have limited report access for the period stated in the Terms, but a change in access is not an immediate deletion of all records. We use access controls and other reasonable safeguards; no online service can guarantee absolute security.
Your choices and contact
You can manage billing in your workspace and contact support to correct business account details. To request access, correction, or deletion of account information, or to ask a privacy question, contact questions@reviewrelayqr.com. We may need to keep records required for transactions, security, or law. We will post material changes to this policy with an updated effective date.