Privacy Policy

2. What Information We Collect

RooLogo AI logo information

RooLogo stores your account identifier, business name and design requirements, requested aspect ratio and image count, generation status, generated logo and preview references, credit usage and Stripe purchase references. Generated images are stored privately by default and are available through your signed-in history. Authorised administrators may access records for support, billing, security and gallery moderation.

To analyse your business and generate logos, we send the business name, design requirements and optional inspiration image to APIMart and its underlying AI providers. Inspiration uploads are stored privately and are sent to the image provider using a time-limited download link when you generate; they are not automatically published in the gallery. We do not include your account email, card details or login credentials in these AI requests. AI and infrastructure providers may process information outside Australia and have their own processing and retention policies. Avoid entering confidential or sensitive information.

Your private logo history keeps only the latest 100 logos for up to three months, whichever limit comes first. Older history records and download references are removed automatically. Download and keep your own copies. Payment, credit and security records are separate and may be retained for accounting, fraud prevention or legal obligations. Previously purchased brand-kit records remain associated with their original purchase.

Generated logos do not enter the public gallery automatically. You can choose Share to Hub, and authorised administrators can also select a generated image for the featured showcase. In either case a reduced-size preview, its business name, an account identifier and sharing date become public. Your email, design requirements, inspiration uploads, credit balance and original image download are not included in the public gallery. Administrators can feature generated or shared previews for the Creator Hub and rotating studio display, and can publish separate administrator-uploaded showcase images. They can remove inappropriate images from saved history and public displays; a private removal notice, including the administrator’s explanation and the business name, is shown in the owner’s Messages. Up to 200 entries are displayed, with featured entries protected from automatic gallery replacement; a featured preview can outlast private history. You can unshare your own preview at any time. Public viewers may copy an image, and unsharing cannot recall those copies.

Account deletion removes your app-accessible logo history and shared previews. Financial and security records may remain where required by law, and infrastructure providers may retain data under their applicable policies. Copies you downloaded or others saved are not deleted by closing your account.

Public pages, reports and visitor counts

Publishing a bio page makes the profile, links and contact details you choose to display publicly accessible. Unpublished pages are available only to their owner and authorised administrators. Your account email is not included in the public profile response unless you deliberately add it as page content.

Page views and link clicks are estimated totals, protected with Cloudflare Turnstile and short-lived rate limits. A verified visitor receives a signed, page-specific proof valid for up to 30 minutes; it is not an advertising identifier. Repeat activity within a minute, owner previews, failed verification or service outages may not be counted. No separate visitor-event records are stored for bio pages.

SendFox signup forms embedded by creators load content directly from SendFox. Visiting a page with an enabled form makes browser requests to SendFox, and submitting sends the chosen fields and consent directly to the creator’s SendFox account. RooQR does not receive or store these new subscriber details or send their confirmation emails. Creators manage their own consent wording, newsletters and subscriber requests; SendFox’s own privacy practices apply to its processing. RooQR’s former subscriber-list and export tools have been retired. Previously recorded consent and opt-out information is retained for handling privacy requests; old unsubscribe links remain available.

Contact forms and content reports collect your name, reply email and message, with anti-bot checks and rate limits. We may share relevant report details with the affected creator when needed to investigate a complaint, but will not publish your contact details. Do not include passwords, payment-card details or unnecessary personal information.

Our hosting and account provider is Base44; payments use Stripe, and anti-abuse checks use Cloudflare and Upstash. Google Fonts and any third-party embeds you choose may receive browser requests. These providers may process information outside Australia. We keep account content while needed to provide the service, and contact and report information while needed to resolve enquiries or meet legal obligations; billing records may need to be retained after account deletion.

3. Why We Collect and Use Your Information

We use your information strictly to provide and improve RooQR, including to:

Authorised administrators can view and export account information for account administration, billing support and enquiries. A basic export contains account email and names; a detailed export also contains account identifiers, role, plan, status, branding ownership and account/email-notification timestamps, but not passwords, authentication tokens, full payment-card details, QR content or scanner identifiers. When a new account first successfully signs in, we send its name, email and registration time to our designated operator inbox for account administration. Our email delivery providers and the operator's email provider may process this information outside Australia. Administrator downloads must be kept secure and deleted when no longer required, subject to legal retention obligations. Account registration alone is not consent to marketing emails.

• Deliver reliable QR redirects and link-in-bio hosting
• Provide aggregated scan analytics to QR code creators
• Authenticate users and maintain persistent logged-in sessions
• Provide Australian customer and technical support
• Detect and block spam, phishing links, and abuse
• Fulfill Australian taxation and accounting obligations

4. We Never Sell Your Data

AI8848 does not sell, rent, or trade your personal information, links, or scanner metrics to advertisers or data brokers.

We disclose information to third-party service providers who assist us in operating our infrastructure, or where required by Australian law or law enforcement. Cloudflare Turnstile processes browser and network signals, including IP addresses, to check for automated requests. Upstash Redis stores pseudonymous visitor hashes and short-lived rate-limit counters; monthly account counters expire after approximately 32 days, and a service-wide safety-budget counter persists. These providers may process data outside Australia. Anti-bot checks and rate limits protect analytics; visitors can continue to their destination without being included in reporting.

5. Data Security and Storage

We implement industry-standard organizational and technological safeguards to prevent unauthorized access, loss, or disclosure:

• HTTPS encryption while information is sent between your browser and our service;
• Secure access controls and database isolation;
• Cryptographic one-way hashing for IP-based visitor count metrics;
• If a data breach occurs, we assess it and notify affected people and the OAIC where required by applicable law.

6. Your Rights to Access and Deletion

Under the Australian Privacy Principles, you have the right to request access to the personal data we hold about you and request that any errors be corrected.

You may request deletion of your account, created QR codes, bio pages and RooLogo history and shared previews at any time, subject to records we must retain for legal, billing or dispute purposes. We may ask you to verify account ownership before releasing or deleting personal information. Send an email to contact@rooqr.com with your registered email address, and our team will process your request within 30 days.

7. Contact Us & Privacy Complaints

If you have any questions, feedback, or complaints regarding how AI8848 handles your personal information, please get in touch with us:

If you are unsatisfied with our response to a privacy concern, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) online at oaic.gov.au or by calling 1300 363 992.