Your customers’ data, handled for you.

These terms apply automatically whenever you use AriaQR for a business, on any plan, free or paid, and form part of our terms of service. Nothing needs signing. If you need a countersigned copy, write to info@realityrift.co. Enterprise customers can ask for a negotiated agreement.

In these terms, you are the business using AriaQR, and we are Realityrift Innovations Private Limited.

For the data below, you are the controller and we are your processor. You decide why it is collected; we process it only to run AriaQR for you.

• scans of your codes and clicks on your short links: time, approximate location from the network, device, operating system, browser and app, referrer, and a visitor hash that changes every day;
• visits and taps on your landing pages, counted the same way;
• a precise location, only for codes where you turned on the location prompt and only from people who agree to share it;
• personal data you put in your codes, links and pages, such as names, phone numbers or email addresses.

Your own account data, and that of your team members, is ours to look after as a controller, as set out in our privacy policy.

• We process your data only on your documented instructions, which are these terms and the way you set up your codes, links and pages, unless the law requires otherwise. If it does, we tell you first unless the law forbids it.
• Everyone who can access it is bound to keep it confidential.
• We protect it with the measures in our privacy policy under how we keep it secure.
• We help you answer requests from the people whose data it is, and with security, breach notifications and impact assessments, as far as our role allows.
• We give you the information you need to show these terms are being met. Audits beyond that can be agreed in writing, at your cost and with reasonable notice.

You allow us to use the services listed under who we share with in our privacy policy. Each is bound by data protection terms at least as protective as these.

Before a new sub-processor starts handling your data, we update that list and email account owners at least 14 days ahead. If you object on reasonable data protection grounds and we cannot resolve it, you may stop using the affected feature or end your plan, and we refund any prepaid time you have not used.

Your data is stored and processed in the United States, on our hosting provider’s servers. We are a company registered in India. Where your data comes from the European Economic Area, the United Kingdom or Switzerland, the European Commission’s Standard Contractual Clauses apply to these transfers (Module 2, or Module 3 where you are yourself a processor), together with the UK addendum, and are incorporated into these terms by reference. Our sub-processors’ own transfers rely on the same clauses in their data processing terms.

If we become aware of a breach affecting your data, we tell you without undue delay, and within 72 hours at the latest, with what we know about it and what we are doing. We keep you updated as we learn more.

You can export a code’s scan events at any time. When you delete your codes, links, pages or account, we delete the data in them as described in our privacy policy, within 30 days, unless the law requires us to keep it.

Liability under these terms follows the limits in our terms of service. If these terms and the terms of service disagree on how personal data is processed, these terms win.

• Subject and purpose: making, serving and measuring your codes, short links and landing pages.
• Duration: for as long as you use AriaQR, then as set out above.
• People concerned: people who scan your codes, open your short links or visit your landing pages, and anyone whose details you put in them.
• Kinds of data: as listed under who does what. No special categories of data are needed, and you should not put any in codes or pages.
• Contact: Realityrift Innovations Private Limited, info@realityrift.co.