New Release v1.0.0: Zero-Prompt Windows Spooler with instant PDF duplex auto-detection is live.
Data Protection • DPDPA 2023 Statutory Compliance

Privacy & Data Protection Policy

DPDPA 2023 • IT Rules 2011 Compliant Strict Zero-Harvesting Architecture

Statutory Privacy Framework (DPDPA 2023 Compliance)

This Privacy Policy is framed pursuant to the Digital Personal Data Protection Act, 2023 (DPDPA), Section 43A of the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1 Zero Document Retention Guarantee

The cornerstone of our architecture is Complete Document Privacy. QRPrint does NOT read, index, OCR, scrape, train AI models on, or permanently store customer documents. Uploaded PDF and image files reside in volatile, encrypted server cache only for the minimal operational duration required to convey raster data to the local Windows spooler daemon, after which they are permanently unlinked and shredded.

2 Categories of Data Processed

A. Merchant Account Data (Persistent)
  • Shop legal name, physical address, and contact details;
  • Operator credentials, agent UUIDs, and printer configurations;
  • Subscription billing records and payment gateway tokens.
B. Ephemeral Order Metadata (Volatile)
  • Randomized 12-character alpha-numeric order reference token;
  • Job parameters: page count, color choice, duplex selection, copies;
  • Temporary raster stream unlinked immediately upon print completion.

3 Transmission Cryptography & Transport Security

All payloads traversing between patron smartphones, cloud relays, and local shop PCs are encrypted using modern Transport Layer Security (TLS 1.3) protocols with 256-bit AES encryption. Access to document download endpoints is restricted via single-use, time-delimited signed URLs authenticated by SHA-256 HMAC tokens that expire automatically within 15 minutes.

4 Statutory Non-Disclosure & Commercial Independence

We never sell, lease, rent, trade, or monetize personal information, metadata, or document data to advertising agencies, data brokers, telemetry aggregators, or third parties. Disclosure is strictly confined to mandatory court orders or formal notices issued by law enforcement authorities in compliance with Section 69 of the Information Technology Act, 2000.