Privacy Protocol.

Effective Date: Dec 8, 2025

1. Data Minimization

CirculateQR practices radical data minimization. We do not track end-user PII (Personally Identifiable Information) on QR scans unless explicitly configured by the Enterprise Client for lead generation purposes.

2. The Vault

All uploaded assets and generated QR codes are stored in isolated S3 buckets with AES-256 encryption. Access is governed by strict RBAC tokens.

3. Third-Party Compute

Our AI inference relies on ephemeral GPU workers. Image data is processed in RAM and discarded immediately after generation. No training data is retained from client generations.