Privacy Notice

Trigon Codes LLC ("Trigon", "we", "us"), trading as Trigon, is the data controller for personal data processed through the Trigon service and website. This notice explains what we collect, why, who we share it with, and what rights you have.

Personal data we collect

• Account data — name, email address, login credentials or the identifier from the Google, Apple, or Microsoft account you sign in with.
• Content data — the QR codes you create, their destination URLs, labels, and any logo images you upload.
• Scan data — when someone scans one of your codes: timestamp, coarse location derived from IP, device or browser type, and referrer. We store a truncated IP address rather than the full one.
• Usage and telemetry — pages viewed, features used, and error diagnostics.
• Support data — the content of emails and messages you send us.

Why we use it, and our legal basis

• Create and administer your account, and provide hosted redirects and analytics — performance of our contract with you.
• Send service, receipt, and welcome emails — contract performance.
• Security, abuse detection, and fraud prevention — legitimate interests in protecting the service and its users.
• Improve and debug the product — legitimate interests.
• Marketing emails, where offered — consent, withdrawable at any time.
• Meeting tax and accounting obligations — legal obligation.

Who we share it with

• Service providers / subprocessors — hosting, database, email delivery, and error monitoring providers, acting on our instructions.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing. Paddle handles payment data as its own controller.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law or to protect our rights.

We do not sell personal data.

Retention

Account and content data is kept while your account is active and for 30 days after closure, then deleted. Scan records are retained for up to 24 months and then deleted or aggregated into non-identifying counts. Billing records are kept for the period tax law requires (typically 7 years).

International transfers

We are based in the United States and our providers may process data in the US and other countries. Where data is transferred from the UK or EEA, we rely on Standard Contractual Clauses or an applicable adequacy decision.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your data, to object to processing based on legitimate interests, and to withdraw consent. US state privacy laws may also give you the right to opt out of sale or targeted advertising — we do neither. Contact privacy@trigon-qr.app and we will respond within one month. UK/EEA users may also complain to their supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls in our database, and least-privilege access for staff and services.

Cookies

We use essential cookies and local storage to keep you signed in and remember interface preferences. Checkout pages set cookies from Paddle needed to process your order. We do not run advertising cookies. You can clear or block cookies in your browser, though sign-in will stop working without the essential ones.

Contact

Trigon Codes LLC — privacy@trigon-qr.app.