Privacy Policy

1. Who we are

This Privacy Policy explains how Aiqrdream (the “Platform”, “we”, “us”, or “our”), operated at aiqrdream.com, collects and processes personal information when you visit or use our websites, apps, APIs, and related services (collectively, the “Services”).

For privacy questions, data-subject requests, or content reports, contact us at [email protected] (or the support email shown on our Contact page). We aim to respond within 15 business days, or sooner where applicable law requires.

2. Scope

This Policy applies to account holders, visitors, purchasers of memberships or AI credit packs, and users of our creative QR, poster, avatar, AI image-generation/editing, dynamic QR, and related tools.

It does not govern third-party websites or payment pages you leave our site to use (for example, a hosted checkout page). Those services are governed by their own policies. We encourage you to review them before providing information.

3. Information we collect

Account information. When you register or manage an account: username, email address, password (stored in hashed/encrypted form), email-verification status, language preference, and account status.

Content and project data. Content you submit or create while using the Services, which may include: QR payload text/URLs, design settings, uploaded images, prompts, style parameters, generated/edited images, dynamic QR destinations, custom domains you configure, and related project metadata.

AI processing inputs. For AI tools (including AI art QR, AI posters/avatars, AI smart edit, and related features), we process the prompts, reference images, and parameters you provide, and may temporarily or persistently store generation records and outputs needed to deliver, bill, troubleshoot, or improve the Services.

Transaction and billing data. Order IDs, product/plan identifiers, amounts, currency, payment status, timestamps, and limited fulfillment records (membership period, AI credit balance changes). Full card numbers are processed by our payment partners and are not stored by us.

Dynamic QR and scan analytics. If you create trackable dynamic QR codes, we may log scan events such as approximate time, device/browser type, referrer, IP address, and coarse location/region derived from IP, to provide analytics you enable.

Technical and security data. IP address, user agent, pages visited, referring URLs, approximate region, cookies/session identifiers, CSRF tokens, error logs, and similar diagnostic data.

Communications. Messages you send to support, and records of service/security notices we send to you.

4. How we use information

We use personal information to: (a) create and secure accounts; (b) provide QR design, export, AI generation/editing, membership, credit, and dynamic-QR features; (c) process payments and fulfill orders; (d) prevent abuse, fraud, spam, and security incidents; (e) enforce our Terms of Service and content standards; (f) respond to support and legal requests; (g) send transactional notices (verification, password reset, billing, security); (h) analyze aggregated usage to improve reliability and product quality; and (i) comply with applicable law.

We do not sell your personal information. We do not use your private prompts or uploaded images to train our own foundation models. Where a third-party AI provider states that API inputs may be used under its own terms, processing is limited to what is necessary to generate your requested output unless that provider’s published policy says otherwise.

5. Legal bases (where required)

Where laws such as the GDPR/UK GDPR apply, we rely on one or more of: performing a contract with you; legitimate interests (securing the Service, preventing abuse, improving reliability—balanced against your rights); consent (where we ask for it); and legal obligation.

6. Sharing and processors

We share personal information only as needed with trusted service providers who process data on our instructions or as independent controllers where required (for example, payment networks), including:

Payment processors: international card and subscription checkout via Waffo; WeChat Pay / Alipay or similar local channels via EasyPay or successor gateways we configure. They receive order and payer details necessary to complete payment.

AI and compute providers (to run the models disclosed in our Terms and on product pages): ByteDance Doubao / Volcengine Ark (image generation and editing), Stable Diffusion (including ControlNet-style pipelines hosted via our GPU providers such as AutoDL), OpenAI-compatible GPT Image endpoints where enabled, and DeepSeek for limited content-operations tasks. Your prompts and media may be transmitted to these providers solely to fulfill your request.

Infrastructure: cloud hosting, object storage/CDN, email delivery, and security monitoring vendors.

We may also disclose information if required by law, regulation, legal process, or governmental request; to protect rights, safety, and integrity of users and the Platform; or in connection with a merger, acquisition, or asset transfer (with notice where required).

7. International transfers

We operate an internationally oriented service. Your information may be processed in jurisdictions where we or our providers maintain servers (which may differ from your country of residence). Where required, we use appropriate safeguards such as contractual protections with processors.

8. Cookies and similar technologies

We use essential cookies and local/session storage to keep you signed in, remember language and preferences, protect forms (CSRF), and maintain security sessions. Analytics or preference cookies may be used to understand aggregate traffic. You can control cookies in your browser; disabling essential cookies may break login or checkout.

9. Retention

We retain account, order, and generation records for as long as your account remains active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Scan logs and operational logs are kept for a period appropriate to analytics, security, and abuse prevention, then deleted or anonymized. You may request deletion of account-linked personal data as described below; some records may be retained in limited form where law requires.

10. Security

We apply reasonable technical and organizational measures (access controls, encrypted transport where appropriate, hashed passwords, least-privilege operations). No method of transmission or storage is 100% secure. Please use a strong unique password and notify us promptly of any suspected unauthorized access.

11. Your rights

Subject to applicable law, you may request: access to personal data we hold about you; correction of inaccurate data; deletion; restriction or objection to certain processing; and portability of data you provided. You may update certain profile fields in the member area. For other requests (including account closure), email [email protected] from your registered address so we can verify identity.

You may also lodge a complaint with a supervisory authority in your jurisdiction where applicable.

12. Children’s privacy

The Services are intended for users aged 18 or older (or the age of digital consent in your jurisdiction, if higher). We do not knowingly collect personal information from children. If you believe a minor has provided information, contact us and we will take appropriate steps to delete it.

13. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date will change, and material updates will be posted on this page (and, where appropriate, notified in-product or by email). Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact

Privacy and data requests: [email protected]. Website: aiqrdream.com. You may also use the Contact page on the Platform.