Terms of Service
Last updated
Summary
- You own what you create. We host it so the Service works, and we never hold your printed codes hostage: dynamic codes keep redirecting on every plan, under the Never-Hostage Guarantee.
- Don't use QRdx for phishing, malware, scams or anything else in the Acceptable Use Policy. Breaking it is the one reason we switch codes off or suspend accounts.
- Data your pages and forms collect from your visitors is yours to look after. We process it for you under the Data Processing Addendum.
- Paid plans are sold through Polar, our merchant of record. Cancel any time; your plan runs to the end of the period you paid for. See Refunds & Cancellations.
- The code is open source under AGPL-3.0. These Terms cover the hosted Service at qrdx.dev, not copies you run yourself.
The agreement
These Terms are an agreement between you and [[LEGAL ENTITY NAME]] ("QRdx", "we", "us"), the operator of QRdx. They apply when you use qrdx.dev, QRdx short links and hosted pages, the dashboard, the REST API, the CLI or the MCP server (together, the "Service"). By using the Service you accept these Terms. If you use it for an organisation, you accept them for that organisation and confirm you're allowed to.
These pages form part of the Terms: the Acceptable Use Policy, the Data Processing Addendum, the AI Features notice and the Refunds & Cancellations policy. The Privacy Policy explains how we handle personal data.
Defined terms. "You" means the person or organisation using the Service. "Customer Content" means everything you create, upload or import: codes, destinations, hosted pages, files, forms, themes and settings. "End Users" means the people who scan your codes, open your hosted pages or fill in your forms.
What QRdx provides
- Static QR codes: made in your browser, with no account. They contain your content directly and don't depend on QRdx once downloaded.
- Dynamic QR codes: codes that point to a QRdx short link, so you can change the destination later, with scan analytics, routing rules, schedules, passwords and scan limits depending on your plan.
- Hosted pages and forms: pages your codes open, such as link lists, menus, vCards, coupons, events and forms.
- Teams, custom domains, files, integrations and imports.
- The REST API, the CLI, the MCP server and the public Image API.
- AI features: AI themes and AI QR art.
What each plan includes is on the pricing page and in Plans and limits. We improve the Service over time. If we remove a paid feature you rely on, we'll tell you before it goes.
Your account
- You sign in with Google or GitHub. Keep that account secure: what happens under your QRdx account is your responsibility.
- You must be at least 13 to use QRdx. Where the law sets a higher age for using online services without a parent's consent (up to 16 in parts of the EEA, under 18 in India), you need a parent's or guardian's permission until you reach it.
- Tell us at support@qrdx.dev if you think someone else has used your account.
- You can delete your account at any time in Settings → Account.
Teams
A team is a shared workspace. Content created in a team belongs to the team, and its owners and admins control it, including members' access. A team's limits follow the best plan among its owners. If you leave a team or delete your account, team content you created stays with the team. See Teams.
Your content
You own your Customer Content. You give us a worldwide, non-exclusive, royalty-free licence to host, copy, process, display and send it, only as needed to run, secure and improve the Service and as you direct (for example, serving a hosted page to an End User or sending a form response to your webhook). The licence ends when you delete the content, except for copies we must keep by law or that sit in backups until they roll over.
You confirm that you have the rights you need to use your Customer Content with QRdx, and that it, and where your codes point, follows the law and the Acceptable Use Policy.
Public content. Codes, short links and hosted pages are public to anyone who has the link. Themes you publish to the community gallery are public with your name and profile picture, and others can use them.
End Users and their data
When your codes, hosted pages and forms collect data from End Users (scans, page events, form responses, conversions), you are the controller of that data and we process it for you. The Data Processing Addendum applies automatically and forms part of these Terms. You are responsible for:
- having a legal basis to collect it, and telling End Users how you use it, for example with a privacy notice on your page;
- getting consent where the law requires it, including for any tracking pixels you add;
- not asking End Users for passwords, full payment card numbers, government ID numbers or health data in forms.
Dynamic codes and hosted pages
- Codes keep working. Your dynamic codes keep redirecting after a downgrade, a failed payment or a cancellation. We never pause them over billing or show ads to your scanners. The Never-Hostage Guarantee sets out exactly what happens in each case.
- When a code stops. A code stops redirecting if you archive, trash or delete it, if a schedule, pause or scan limit you set ends it (then scanners go to your fallback URL or a neutral "campaign ended" page), or if we switch it off under the Acceptable Use Policy. Codes we switch off for abuse can't be turned back on by their owner.
- Short links. QRdx short links and slugs stay ours. You can't transfer or sell them separately from your account.
- Badges. On the Free plan, hosted pages show a small "Made with QRdx" footer.
- Scannability. Test every code before you print it. We can't guarantee that a code scans on every device, size, material or lighting.
Custom domains
You can serve codes and pages from a domain you control. You must own or be allowed to use the domain and keep its DNS records pointing at QRdx. When you add a domain, we register it with our hosting provider, which issues its TLS certificate. Everything served on your domain must follow these Terms. If your DNS stops pointing at QRdx, or the domain lapses, codes printed with that domain stop working; the same codes still resolve on QRdx's own short-link domain. Remove domains you no longer use. See Custom domains.
Integrations and imports
- Integrations. When you connect a third-party service, for example Dub, Google Drive or another service in the integrations directory, you let QRdx use it on your behalf with the permissions you grant. Your use of that service is governed by its own terms. We store its tokens encrypted and you can disconnect it at any time. We aren't responsible for third-party services, their availability or what they do with data you send them.
- Imports. When you import codes or other data from another service, you confirm you're allowed to. We try to bring everything across faithfully, but check imported codes before you rely on them.
API, CLI and MCP server
- Access. The REST API, the CLI and the MCP server at
https://mcp.qrdx.dev/mcpuse OAuth access tokens tied to your account. Keep tokens secret. Anything done with a token you authorised, including by an AI assistant or agent you connect, counts as done by you. - Limits. Each plan has a daily request allowance, and endpoints have per-minute rate limits; over a limit you get a
429response. The current numbers are in the REST API, MCP and Image API docs. Don't work around limits, for example with several accounts or rotating addresses. - Image API. The public Image API is free to use within its rate limit. Don't use it as a bulk image host for heavy traffic; cache the images you need.
- Changes. We try to keep the API stable and to announce breaking changes in the changelog before they happen.
- No harmful use. Don't use the API to scrape other people's content, to test the Service's load, or to probe it for vulnerabilities except as the Security policy allows.
AI features
AI themes and AI QR art send your prompts and images to model providers. The AI Features notice explains what is sent and to whom. AI output can be wrong, can look like other people's work and, for AI art, can be harder to scan. You decide whether to use it and you are responsible for that use. AI art credits are counted per calendar month by plan, and credits for failed generations are returned.
Acceptable use
Follow the Acceptable Use Policy. In short: no phishing, malware, scams, illegal goods, spam, deceptive redirects or impersonation, and no attacks on the Service or its users. You also agree not to:
- get around plan limits, safety checks or a code we've switched off;
- resell access to the hosted Service as your own without our written permission;
- use the Service in breach of export controls or sanctions.
Plans, billing and refunds
- Merchant of record. Paid plans are sold by Polar, which acts as merchant of record. Polar takes your payment, charges any sales tax or VAT, issues invoices and handles payment disputes, under its own terms. Prices are on the pricing page.
- Renewal. Subscriptions renew automatically each month or year until you cancel.
- Changing or cancelling. Change plans, switch between monthly and yearly, update your card or cancel under Manage subscription in your settings, which opens the Polar billing portal. When you cancel, your plan stays active until the end of the period you paid for, then your account moves to Free.
- Failed payments. If a payment fails and the subscription lapses, it is the same as cancelling. Nothing is paused.
- Price changes. We'll give you notice before a price change applies to your subscription. It takes effect at your next renewal, so you can cancel first.
- Refunds. See Refunds & Cancellations.
Open source and the hosted Service
QRdx's source code is published under the GNU Affero General Public License v3.0. That licence governs your use of the code, including running your own copy. These Terms govern the hosted Service we run at qrdx.dev and do not limit the rights the licence gives you. The QRdx name and logo identify our Service; the licence doesn't give you the right to use them in a way that suggests your copy is ours or is endorsed by us.
Suspension and termination
We may switch off a code, page or file, remove a community theme, or suspend or close an account when:
- it breaks these Terms or the Acceptable Use Policy;
- the law or a court or authority requires it; or
- it puts End Users, other customers or the Service at risk.
When we can, and when it's safe and lawful, we tell you what we did and why. If you think we got it wrong, email support@qrdx.dev with "[appeal]" in the subject. We never suspend an account or pause codes because of a billing problem.
You can stop using the Service and delete your account at any time.
Your data when you leave
- Before you go. Download your codes as SVG or PNG, export scans and form responses as CSV, and read your codes through the REST API.
- Deleting your account deletes your personal workspace: codes and their scans, pages, responses, files, themes, domains, integrations and sessions. This can't be undone, and the codes you printed from that workspace will stop working. Team content you created is handed to another team member so team codes keep working. Details are in the Privacy Policy.
- If we close your account for abuse, we may keep the records we need for safety and legal reasons, such as abuse reports and our audit log.
- If QRdx shuts down, you get at least 12 months' notice, time to export everything and a documented way to run the open-source app yourself, as promised in the Never-Hostage Guarantee.
Disclaimers
We work hard to keep QRdx reliable, but to the extent the law allows, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We don't promise that the Service will be uninterrupted or error-free, that every code will scan everywhere, or that AI output will be accurate. We aren't responsible for third-party websites your codes point to or for third-party services you connect.
Limitation of liability
To the extent the law allows:
- neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or business opportunities;
- our total liability for all claims about the Service is limited to the amount you paid QRdx in the 12 months before the claim arose.
These limits don't apply to liability that can't be limited by law, such as for fraud or, where applicable, death or personal injury caused by negligence. If you are a consumer, you keep the rights your local consumer law gives you.
Indemnity
You agree to defend and compensate QRdx against third-party claims, and the losses and costs (including reasonable legal fees) that come from them, arising from your Customer Content, from where your codes point, from your use of the Service against these Terms or the law, or from data you collect from End Users. We'll tell you about the claim promptly and let you control its defence.
Governing law and disputes
These Terms are governed by the laws of India, without regard to conflict-of-law rules.
- Talk to us first. Email support@qrdx.dev and we'll try to settle the dispute in good faith within 30 days.
- Arbitration. If that fails, the dispute is settled by binding arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator, seated in [[ARBITRATION SEAT CITY]], India, in English.
- Courts. Matters that can't go to arbitration, and urgent requests for interim relief, go to the courts of [[COURTS CITY]], India.
If you are a consumer in the EEA or the UK, you also keep the protection of the mandatory laws of your country and can bring a claim in your local courts.
Changes to these Terms
When we change these Terms, we update this page and the date at the top. For significant changes, we also email account holders before they take effect, unless a change is needed straight away for legal or security reasons. If you keep using the Service after a change takes effect, the new Terms apply. If you don't agree, stop using the Service and delete your account.
General
- Entire agreement. These Terms, with the pages they include, are the whole agreement about the Service.
- Severability. If part of these Terms can't be enforced, the rest still applies.
- No waiver. Not enforcing a right right away doesn't mean we give it up.
- Assignment. You can't transfer these Terms without our consent. We may transfer them as part of a merger, acquisition or sale of assets, and we'll tell you if that happens.
- Events outside our control. Neither party is responsible for delays caused by events it can't reasonably control, such as outages at our providers, natural disasters or government action.
Contact
[[LEGAL ENTITY NAME]], [[REGISTERED ADDRESS]]. Email: support@qrdx.dev.
Changes: 1 November 2026. Rewritten to cover dynamic codes, hosted pages, teams, custom domains, integrations and imports, the API, CLI and MCP server, AI features, billing through Polar, the open-source licence, suspension and what happens to data on termination.