For customers who collect personal data through our service and need a processor agreement. A signed copy is available on request.
Parties and scope
Between the customer and Agochar Tech LLP, 415 Decora Square, Sadhu Vasvani Road, Rajkot 360005, Gujarat, India. It applies where we process personal data on the customer’s behalf, and forms part of the terms of service. It is written to meet section 8 of the DPDP Act 2023 and Article 28 of the GDPR.
- Scan events
- Derived location, device and campaign fields, to produce the analytics you asked for. No IP address is stored.
- Form submissions
- Whatever your hosted-page forms collect, stored for you to view and export.
- Uploaded files
- Logos, images and documents you host with us, checked for malware where the scanner is configured.
- Account records
- Held by us as controller, not processor — covered by the privacy notice.
Our commitments
- Instructions
- We process the data only to provide the service, on your documented instructions, unless the law requires otherwise.
- Confidentiality
- Everyone who can access it is bound to keep it confidential.
- Security
- Encryption in transit, encrypted secrets, two-factor authentication for staff, revocable sessions and least-privilege access.
- Sub-processors
- Listed on the sub-processor page, with the date each was added. You may object to a new one; if we cannot resolve it, you may end the affected service.
- Rights requests
- We help you answer requests from the people whose data it is, and pass on any we receive.
- Breaches
- We notify you without undue delay, and give you what you need to notify the Data Protection Board, a supervisory authority or the people affected.
- Deletion
- When your account is deleted, form submissions are deleted within 30 days and scan events expire on your plan’s retention period. Codes you chose to keep, and the hosted pages they point to, stay so printed codes keep working.
- Transfers
- Outside the EEA and UK, on the European Commission’s Standard Contractual Clauses where they apply.
Audit and certification
We will answer a reasonable security questionnaire once a year. We do not yet hold SOC 2 or ISO 27001 certification, and we would rather say so than imply one we do not have.
Who operates this service
- Operator
- Agochar Tech LLP, a limited liability partnership registered in India under the Limited Liability Partnership Act, 2008.
- Registered office
- 415 Decora Square, Sadhu Vasvani Road, Rajkot 360005, Gujarat, India
- Grievance officer
- Rajesh Dalsaniya, Grievance officer and CEO · grievance@qrcodegenerator.in · +91 86986 76976. Complaints are acknowledged within 24 hours and resolved within 15 days.
- Governing law
- Governed by the laws of India; the courts at Rajkot, Gujarat, India have jurisdiction, subject to your rights as a consumer.
This document is in force from 1 November 2026. If we change it, the new version and its date appear here, and account holders are told before a material change takes effect.