Privacy Policy

1. Who is responsible

QRNeto is operated by WAGON LLC, Yerevan, Armenia. For privacy questions or to start a rights request, call +374 93 078807 or use our Contact page. We will arrange an appropriate way to handle your request and verify your identity where necessary. Do not send passwords, payment credentials or unnecessary identity documents through an unsecured channel.

WAGON LLC determines the processing needed to operate QRNeto accounts, security, commercial administration and support. A hotel, restaurant or other business using QRNeto generally determines how its own guest, customer and staff data is used. For that business data, the business is responsible for its notices and instructions, and QRNeto acts on its behalf where agreed. Contact the relevant business for requests about its services or guest records; we assist it where applicable.

2. Data we process

• Account and contact information, such as name, email, organization, workspace and business details, roles and preferences.
• Authentication and security information, including password hashes, session and recovery information, registered passkey public credentials, and technical security logs. QRNeto does not receive your fingerprint, face scan or device PIN from passkey authentication.
• Commercial and accounting records, such as trial/subscription state, approved orders, add-ons, included allowances, purchased credit lots, usage allocations and ledger entries. No payment-card details are required for trial signup.
• Content you or your business submit, including descriptions, menus, service information, translations and operational requests, and relevant guest/customer information your business chooses to process.
• AI requests and results when you use an AI feature, plus provider/model identifiers, usage dimensions, cost and AI Credit accounting metadata.
• Support communications and records of accepted Terms and Privacy versions, linked to the account and an acceptance timestamp.

Technical infrastructure may process IP addresses, browser information and request logs for operation and security. The new signup acceptance record stores the user, document versions, URLs, document fingerprints and UTC timestamp; it does not add a raw IP address or user-agent to that record. Signup abuse protection uses a hashed client identifier and a bounded attempt window.

3. Purposes and legal bases

We use account and service data to create and secure accounts, provision organizations/workspaces/modules, provide requested features, communicate important service information, and administer subscriptions and credits. Where applicable, this is necessary to perform our agreement with you or take steps you request before entering it. For business users acting for an organization, our legitimate interests include delivering and administering that relationship, preventing abuse and resolving support or legal issues, subject to applicable rights and safeguards.

We keep records needed to meet legal obligations and establish or defend legal claims. Where an optional purpose requires consent, it must be requested separately and may be withdrawn without affecting earlier lawful processing. Agreeing to the Terms and acknowledging this notice does not mean consenting to all processing or to marketing.

4. Sharing and AI providers

Information is available to authorized users in your organization according to their roles and workspace/module access. Service providers may process information needed for hosting, databases, communications, support, security and requested AI processing, under appropriate arrangements. When you request an AI translation, the content needed for that translation is sent to the configured AI provider, currently OpenAI in the audited integration. Provider and model details may change with service configuration; contact us for current relevant provider information and arrangements.

We may disclose information where legally required, to protect rights and security, or as part of a lawful business transaction with appropriate protections. We do not publish private account or wallet information merely because organizations use the same platform. Public business content you choose to publish can be viewed by its intended audience.

5. International processing

WAGON LLC is based in Armenia, and infrastructure or AI providers may process information in other countries. Where applicable data-protection law requires safeguards for an international transfer, the relevant transfer must use an appropriate lawful mechanism, such as an adequacy decision or suitable contractual safeguards. Contact us for information about the arrangements relevant to your service and any available copies of safeguards.

6. Retention and security

We retain information for as long as needed for the purpose for which it was collected. Relevant criteria include whether your account or subscription remains active, operational needs, support and dispute resolution, legal accounting obligations and limitation periods. Trial and subscription allowance periods do not erase historical accounting or purchased-credit records. Archived business content remains subject to access controls and retention/deletion arrangements; a downgrade is not the same as an account-deletion request.

After closure or a valid deletion request, information no longer needed is deleted or anonymized, subject to lawful retention and backup recovery cycles. Contact us about the periods applicable to particular records. We use access controls and other technical and organizational measures appropriate to the service; no internet service can promise absolute security. Keep credentials secure and grant staff only the access they need.

7. Cookies and device features

The app uses session and security mechanisms needed for authentication, CSRF protection and preferences. Where you choose a supported remember-me option, a persistent authentication mechanism may also be used; logout terminates access under the normal authentication system. Browser or platform passkey settings are controlled by you and your device/platform provider. Any optional non-essential analytics or advertising technology must be explained and, where required, enabled only after a separate choice. This notice does not authorize such technology by default.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to particular processing, and withdrawal of consent where consent is the legal basis. These rights have conditions and exceptions; for example, some accounting records may need to be retained. Contact WAGON LLC using the details above. We may need proportionate identity verification. You may also complain to the competent data-protection authority. Where GDPR applies, requests are generally answered within one month, subject to lawful extensions and notice.

QRNeto’s AI translations and usage accounting are service functions; they are not intended to make solely automated decisions producing legal or similarly significant effects about individuals. Tell us if your proposed business use requires additional safeguards. Do not submit children’s or special-category personal data unless the use is supported by the necessary lawful basis, safeguards and agreements.

9. Changes

This is version 2026-10-17.1, effective 17 October 2026. Material changes will be communicated appropriately. Updated text remains available on this page; legal document versions accepted during signup are recorded separately. Contact WAGON LLC, Yerevan, Armenia, at +374 93 078807 with questions.