Terms of service

Version 25 September 2026. Keep a copy for your records.

1. Agreement and eligibility

QR Yours is operated by VOVOS PANTRY trading as QR YOURS, South African private company 2026/404842/07. The planned international service is for individuals and businesses. These terms govern use of QR Yours as a customer. Creating an account or subscribing requires your agreement to these terms; merely opening someone else's QR link does not make you a customer under them. You must have legal capacity to contract, or use an account managed by an authorized adult or organization responsible for its lawful use. If you act for an organization, you confirm that you may bind it. Applicable local age and capacity requirements still apply.

Business, service and correspondence address: 71 MELVILE ROAD, ILLOVO, SANDTON, GAUTENG, 2196, South Africa. Telephone: +27 71 485 6395 (0714856395). Email: team@qryours.com.

2. The service

QR Yours provides a static QR generator without an account and account-based dynamic QR redirects, analytics and optional management tools. Static QR images contain their final content and do not depend on QR Yours after download. Dynamic codes depend on QR Yours’s redirect service and cannot function if that service is unavailable or the code is blocked or disabled. Periodic destination availability monitoring is not offered at launch. Independent URL safety checks continue; they do not check that your website stays reachable. Hosted PDF uploads are included in the planned launch. New hosted-PDF uploads and replacements are currently unavailable. PDF processing terms apply only when the feature is enabled.

3. Printed QR code risks

A static QR code cannot be edited after download. You are responsible for checking its content, scan reliability, final printed size and destination before producing or distributing it, especially in large quantities. You must keep destinations available and maintain your own source files. QR Yours is not responsible for reprinting costs caused by incorrect content, changed destinations, unsuitable artwork or a failure to test the final material, except where liability cannot lawfully be excluded.

4. Accounts and security

Give accurate account information, protect your sign-in method and notify the operator of suspected unauthorized use at team@qryours.com. You are responsible for activity under your account and must not share access in a way that defeats plan limits or security.

5. Your content and destinations

You keep ownership of content you submit. You grant QR Yours the limited permission needed to store, copy, route to, scan for safety, and display that content to provide the service. You confirm that you have the rights and lawful basis needed for every destination and for any personal information encoded in a QR code. If you direct processing of other people’s information, provide an appropriate notice, including at the point where a dynamic link is shared, and obtain any required permission. The customer data-processing schedule below covers activities on your instructions; our own legal responsibilities are not transferred to you.

6. Acceptable use and enforcement

You must follow the Acceptable Use Policy. QR Yours may reject, disable or block a dynamic code; restrict an account; preserve evidence; or cooperate with lawful requests where needed to address abuse, security risk, law or material breach. Urgent safety action may happen before notice. For human review, contact team@qryours.com with the QR link or case reference.

7. Plans, allowances and feature changes

Current allowances are listed on the pricing page. When a scan-tracking allowance is reached, redirects continue but additional analytics are not recorded until reset or upgrade. QR Yours may change or discontinue features and limits with reasonable notice where practical; changes will not silently repoint an existing code.

8. Paid subscriptions

Full is USD10 per month and Business is USD15 per month. Applicable taxes and the recurring total are shown before payment; tax treatment varies by location. Review and correct your order before confirming. Paddle is Merchant of Record for its transactions and supplies transaction receipts. No annual subscription is offered in this launch catalogue.

When live subscriptions open, Paddle transactions will also be subject to the Paddle Buyer Terms. You can request cancellation in Billing or use the subscription-management link in your Paddle receipt. Subscriptions renew automatically until cancelled. Cancellation normally stops renewal at the end of the applicable billing period; it is not itself a refund. Statutory withdrawal, early-cancellation and refund rights are unaffected.

9. What happens when a paid plan ends

Cancellation keeps paid access through the verified paid-through date; it does not renew the subscription. After paid access ends, the Free allowance is three active managed codes shared between URL and PDF codes. Use Keep Free to select eligible codes; other codes can become inactive without being deleted or repointed. Any applicable payment grace period is shown in your account. Renewal can restore eligible access without changing the permanent link. Free PDF publication credits and storage limits still apply. Preview access does not create a paid entitlement. Mandatory early-cancellation and refund rights remain available.

10. Third-party services

Authentication, hosting, billing, email, reputation checking and destinations can rely on third parties. Their services have separate terms, but using providers does not remove QR Yours’s own contractual or legal responsibilities. A destination safety result is a limited signal, not a certification that a site is safe, lawful or continuously available.

11. Intellectual property and feedback

QR Yours and its software, branding and interface are protected by applicable intellectual property laws. These terms do not transfer those rights. If you volunteer feedback, QR Yours may use it without restriction or payment, provided doing so does not identify you contrary to the Privacy Notice.

12. Availability, warranties and liability

No service-level guarantee is offered. We do not guarantee uninterrupted service or error-free safety results. Nothing in these terms excludes mandatory consumer guarantees or liability that the law does not allow us to exclude. No additional liability cap or customer indemnity is imposed by these terms.

13. Termination, governing law and contact

You may stop using the service and request account deletion after identity verification. Account access and Dynamic redirects pause immediately; you can sign in to cancel within exactly 14 days of the server-recorded UTC request. This is QR Yours policy, not a statutory recovery period. After the deadline permanent erasure cannot be cancelled. Minimum genuine accounting records remain for seven years or a relevant legal hold, and provider backups follow the cycle described in Privacy. Saved browser-only Static QR codes are unaffected. QR Yours may terminate or suspend use for material breach, safety risk or legal necessity. The laws of South Africa govern our service agreement, without removing mandatory rights or access to courts or regulators available to you under applicable law. No exclusive foreign forum or compulsory arbitration is imposed. You may first ask us to resolve a complaint, but this does not delay statutory deadlines or restrict other remedies. Contact team@qryours.com for requests or complaints. No choice of law removes mandatory rights that apply to you. Michael Toaney Russell is the sole director and Information Officer. Material terms changes will be dated and notified where required; renewed agreement will be obtained where necessary.

14. Customer data-processing schedule

For customer-directed content and reporting, you determine the purposes and we act as operator/processor on your documented instructions: the service, authorized settings and lawful requests to team@qryours.com. We flag apparently unlawful instructions and seek clarification, restricting affected processing where necessary. We notify you of legally required processing outside instructions unless notice is prohibited. No instruction permits unrelated advertising, sale or independent content reuse. Our own account, billing, support and security purposes remain our responsibility.

Processing includes receiving, storing, organizing, serving, redirecting, validating, reporting, exporting and erasing during service and necessary restricted cleanup/holds. People concerned are your representatives, QR visitors and people in your content. Data includes destinations/history, labels/settings, account/content references, enabled PDF bytes/names/hashes and safety results, and optional reporting time, coarse area/device data and daily pseudonymous keys. Static input stays in the browser. Public PDFs are not a confidential vault. Specially protected or children's information needs its specific lawful condition and suitable safeguards; contact us before using it for such records.

You must identify yourself and your reporting purpose where you share the QR, provide the required notice and establish lawful publication/processing authority. Optional production reporting requires the scanner's separate QR-specific affirmative choice. No choice, refusal, withdrawal or DNT/GPC stops optional collection without blocking the link. Account acceptance is not scanner consent; a session preference does not prove identity or age.

We restrict access to authorized purposes, minimum permissions and confidentiality-bound people/providers. Measures include authenticated accounts, ownership checks, restricted administration, verified encrypted transport, private storage, PDF quarantine/structural and malware checks, independent URL safety checks, bounded credentials, pseudonymous reporting, controlled exports/deletion and incident handling. No absolute security is guaranteed.

You authorize the identified subprocessors: Cloudflare for hosting/storage, edge security, Turnstile, private validation and backups; Clerk for authentication; Google for configured Web Risk and Workspace services; and AWS for enabled PDF quarantine/malware processing. Paddle's independent payment/tax/fraud purposes and providers' own account/security purposes are separate. The Privacy Notice describes locations, retention and safeguards. We bind subprocessors to applicable confidentiality, security, assistance, deletion and incident duties and remain responsible for our subprocessor obligations.

We email your registered account at least 30 days before a planned material subprocessor addition/replacement, explaining its function and material location/safeguard changes. You may object on reasonable data-protection grounds during that period. We seek a reasonable resolution or stop affected processing and facilitate the applicable export, termination and remedies. Urgent security or legal circumstances may require shorter notice; we notify you as soon as practicable and retain the same objection/resolution route.

Restricted transfers require the applicable POPIA section 72 safeguard and, where relevant, EU/UK instruments, completed annexes and supplementary measures, including a customer-to-QR Yours instrument where required for the actual roles. This schedule does not alter mandatory clauses, execute them automatically or substitute blanket consent. Processing requiring an unavailable safeguard does not begin merely because you accept these terms.

Taking account of processing and available information, we assist with rights requests, security duties, relevant impact/transfer assessments and regulator enquiries. We promptly forward requests about your controlled processing unless law requires us to respond. We do not collect excess identity data merely to identify a past pseudonymous scan. We notify you of a relevant security compromise without undue delay, meet stricter applicable operator duties, and supply known facts, containment steps and material updates. Each party retains its own legal notification duties. We provide reasonable compliance information and permit legally required audits under secure confidential arrangements protecting other customers; existing evidence does not extinguish a statutory audit right. No new audit fee is imposed.

On termination or lawful instruction, we return available customer data or erase it as requested, subject to binding retention duties. Export scope is explained; it is not every provider record. The Privacy Notice's distinct retention periods apply. Failed cleanup is retried, not reported complete; retained material is restricted to its justified purpose. Restores require integrity checks and the latest independent deletion-ledger reconciliation, including child/object copies, before use. Provider recovery copies do not disappear instantly. This schedule prevails over conflicting general service terms on processing; mandatory law and an executed mandatory transfer instrument prevail over both. Your authenticated acceptance records the version/hash separately from optional analytics consent.