Privacy policy

Last updated 7 November 2026

This explains what Evergreen QR collects, why, and what you can do about it. Evergreen QR is operated by DRUTAM TECHNOLOGIES PRIVATE LIMITED ("we"). Questions: contact@drutamtech.com.

What we collect

• Your account: your email address, and your name if Apple or Google share it when you sign in. We never see your Apple or Google password.
• Your QR codes: each code's name, destination link, optional logo image, status, and a history of changes.
• Scan counts: how many times each code was scanned per day. We don't record who scanned a code: no names, phone details, locations or IP addresses.
• Your subscription: if you subscribe in the iPhone app, Apple tells us which plan you have, when it renews or ends, and its transaction ID. We never see your card or bank details: Apple handles payment. If you buy on our website, Razorpay processes the payment, so we never receive your full card number, CVV, UPI PIN or net-banking password. We keep the invoice details: your name, email and state, your GSTIN and company name if you give them, the Razorpay payment ID and the amount.
• Security logs: when you sign in or change a code we record the time, what changed and your IP address. We keep these logs for 1 year, to keep the service safe and because Indian rules require service providers to keep them.

Why we use it

To run the service (sign you in, store and redirect your codes, show your scan counts), to manage your subscription, to stop misuse (we check destination links against Google Web Risk, which means the link is sent to Google for that check), and to answer you when you contact us. We don't sell your data and we don't show ads.

Who else handles it

Amazon Web Services stores and runs everything, in Mumbai, India. Apple and Google handle sign-in if you choose them. Apple handles App Store payments and Razorpay handles payments on our website. Google Web Risk checks destination links. We share data with authorities only when Indian law requires it, for example under a court or government order.

How long we keep it

While your account exists. When you delete your account (in the app: account menu → Delete account), we delete your sign-in and retire all your codes. A retired code's record (the code, its last destination, its change history and the email of its owner) is kept so the same code can never be given to anyone else, and for at least 1 year because Indian law requires us to keep such records. Security logs are kept for 1 year. Invoice details for website purchases are kept for as long as GST law requires: 72 months from the due date of the annual return for that year, even if you delete your account.

How we protect it

Everything travels over HTTPS. Your data is stored with Amazon Web Services in Mumbai and encrypted at rest. Only the people who run Evergreen QR can access it, and only to run the service, answer you or meet a legal obligation.

Your rights

You can see and correct your codes in the app at any time, delete your account in the app, or write to us to get a copy of your data, correct it or erase it, under India's Digital Personal Data Protection Act, 2023.

Grievances

See our Grievance Officer page. We acknowledge complaints within 24 hours and resolve them within 7 days.

Children

Evergreen QR is a business tool and is not meant for children under 18.