Data Processing Addendum
Summary of how QRbanner processes personal data on behalf of customers. A signed DPA is available on request for Business, Agency and enterprise contracts.
Last updated: July 2026
Scope
This addendum applies when you use QRbanner to process personal data of your end users (for example scan analytics, lead forms or team member emails) as a controller and QRbanner acts as a processor.
Roles
You determine the purposes of processing for customer content and campaign data. QRbanner processes that data to provide the service, security, support and billing.
Processing activities
Typical processing includes account administration, QR content storage, scan and CTA analytics, webhook delivery, optional GPS capture you enable, and transactional email.
Security measures
We apply technical and organizational measures described on our Security page, including TLS, hashed credentials and API keys, access controls and rate limiting.
Requests and contact
For a countersigned DPA, sub-processor updates or data subject assistance, contact sales or support. Enterprise buyers can also use the printable Enterprise Overview.
Request a signed DPA: support@qrbanner.com · Trust Center