Privacy Policy

1) Our Privacy Commitments

• We never sell or rent your personal information to third parties.
• We prioritize transparency, security, and control over your data.
• We comply with the General Data Protection Regulation (GDPR).
• We are working toward ISO/IEC 27001 certification for our information security management system.

2) Information We Collect

A. Information You Provide

• Account details: name, email address, password, avatar/profile image.
• Contact or inquiry forms and support requests.
• Business/team details when using Organization/Teams features.
• Billing information for subscriptions (processed securely via payment providers such as Razorpay/Stripe). We do not store card numbers on our servers.

B. Information Collected Automatically

• IP address, browser type, device identifiers, and operating system.
• Pages visited, navigation patterns, and referring URLs.
• Aggregated analytics data via services like Google Analytics.

C. Social Logins

If you sign in with Google, we receive limited profile details (name, email, avatar) from Google in accordance with your consent and Google’s privacy settings.

3) How We Use Your Information

• Create and manage your account and authenticate your access.
• Deliver core features (short links, QR codes, link pages) and customer support.
• Process payments and manage subscriptions.
• Improve and personalize our product, including usage analytics.
• Send service updates, announcements, and (optionally) marketing/newsletters. You can unsubscribe at any time.
• Comply with legal obligations and enforce our Terms.

4) Data Sharing & Third Parties

We share information only with trusted providers that help us operate URLCrop:

• Payment processors (e.g., Razorpay/Stripe) for subscription billing.
• Hosting & infrastructure (e.g., AWS/Hostinger) to run our services.
• Analytics (e.g., Google Analytics/Hotjar) to understand and improve usage.

We do not sell, rent, or trade personal information with advertisers or data brokers.

5) Cookies & Tracking

We use cookies and similar technologies for session management, authentication, analytics, and to enhance your experience. You can disable cookies in your browser settings, but some features may stop working. EU visitors will see a cookie banner to manage consent in line with GDPR.

6) Data Retention

We retain your data for as long as your account remains active. If you delete your account, we retain data for 30 days for recovery and audit purposes, after which we permanently delete it from active systems.

7) Data Security

• Passwords are hashed using strong one-way encryption (bcrypt).
• Data in transit is protected with TLS/SSL.
• We apply secure development practices and defense-in-depth controls.
• We are preparing our ISMS in alignment with ISO/IEC 27001 .

8) Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, rectify, delete, or port your data, and to restrict or object to certain processing. You can also lodge a complaint with your local Data Protection Authority. To exercise your rights, contact us at info@qalbit.com .

9) Children’s Privacy

URLCrop is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

10) International Transfers

If you access URLCrop from outside India, your information may be transferred to, stored, and processed in India and other countries where our providers operate. We take appropriate safeguards consistent with applicable laws.

11) Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. We encourage you to review this page periodically.

12) Company Details

QalbIT Infotech Pvt Ltd
C-109, Siddhi Vinayak Towers, Near Kataria Arcade,
Opp. S.G. Highway, Makarba, Ahmedabad – 380051, India

13) Contact Us

• Email: info@qalbit.com
• Website: urlcrop.com