Privacy Policy

Last updated 2026-05-10

What we collect

• Account data — email address, hashed password, workspace metadata.
• Link data — short codes, target URLs, titles, and the user/workspace that owns them.
• Scan events — timestamp, hashed visitor IP (IPv4 truncated to /24, IPv6 to /48), country code, coarse user-agent class. We do not store raw IP addresses.
• API audit log — for keys you mint, we log request route, status, and timestamp to help you investigate issues.

What we do not collect

• We do not sell or share scan-event data with advertisers.
• We do not place tracking cookies on visitors of your short links.
• We do not store full user-agent strings or precise locations.

Data retention

• Scan-event analytics — retained for up to 12 months (365 days) on every plan.
• Account & link data — retained while your account is active and deleted within 30 days of account closure.
• Encrypted database backups — retained for 30 days, then rotated out.

Subprocessors

A current list of subprocessors is available in the DPA.

Your rights

You may request export or deletion of your account data at any time by emailing [email protected]. We will respond within 30 days.

Who we are

Qrindo is operated under the Folowise name and acts as the data controller for account data and as a processor for the scan data you collect. For privacy questions or to exercise your rights, contact [email protected].