Privacy Policy

Last updated: 2025-12-16

At Acemaker QR Log ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our plant information logging service that relies on QR code scanning, our website, and related services (collectively, the "Service").

1. Information We Collect

We collect information to operate and improve the Service, including:

  • Account Information: When you sign up through Clerk, we collect your email address and profile information as provided by your authentication method.
  • Plant Data (User Content): Information you provide about your plants, including names, notes, descriptions, and other plant-related metadata.
  • Uploaded Photos: Images you upload for the purpose of documenting and identifying your plants.
  • Device & Technical Information: Information automatically collected when using the Service, such as your IP address, browser type, operating system, and basic usage logs. This helps ensure security and performance.
  • QR Code & Scan Logs: QR identifiers and scan metadata (such as timestamps or scan counts) used to display plant records and measure usage.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Allow you to create, manage, and view plant entries and QR code records.
  • Improve functionality, reliability, and user experience.
  • Communicate important updates, security notices, or support responses.
  • Monitor and analyze usage patterns to improve the Service.
  • Detect, prevent, and address technical issues or security threats.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide you with the Service you requested.
  • Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, provided these interests do not override your rights.
  • Consent: Where you have given explicit consent for specific processing activities.
  • Legal Obligation: Processing necessary to comply with applicable laws.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

  • Essential Cookies: Required for authentication and core functionality. These cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Service.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Service functionality.

5. Data Storage and Security

Your data—including plant information and uploaded photos—is securely stored using Convex and Clerk, with infrastructure hosted in the United States. We implement industry-standard security measures to protect your information from unauthorized access or misuse, including encryption in transit and at rest. However, no method of transmission or storage over the internet is completely secure.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. Specifically:

  • Account Data: Retained until you delete your account.
  • Plant Data & Photos: Retained until you delete them or your account.

After account deletion, we may retain certain data for up to 30 days in backups before permanent deletion, or longer if required by law.

7. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. If you are located in the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place for such transfers, including:

  • Standard Contractual Clauses approved by the European Commission.
  • Data processing agreements with our service providers.

8. Sharing of Information

We do not sell or rent your personal information. We may share information with:

  • Service Providers: Trusted partners including Clerk (authentication), Convex (database and file storage), and self-hosted Web Analytics, solely for operating and improving the Service.
  • Legal or Safety Obligations: When required by applicable law, or when necessary to protect our rights or the safety of users.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us at support@acemaker.shop. We will respond within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request information about the categories and specific pieces of personal information we have collected.
  • Right to Delete: Request deletion of your personal information.
  • Right to Opt-Out: We do not sell personal information, so this right does not apply.
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

11. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Any significant changes will be posted on this page along with an updated revision date. We encourage you to review this policy regularly. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at:

  • Email: support@acemaker.shop

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.