Authorized Subprocessors
Last Updated: September 10, 2026 • Maintained under our Data Protection and Subprocessor Governance framework
To deliver high-availability QR code generation, dynamic redirection, and secure subscription billing, QRnaly engages verified third-party subprocessors. Each vendor is vetted for technical and organizational security measures, data isolation, and contractual confidentiality.
Current Authorized Subprocessors
Razorpay Software Private Limited
Payment Gateway & Subscription BillingPurpose: Processes recurring subscriptions, add-on purchases, credit card tokenization, UPI transactions, and automated invoicing.
Data Handled: Customer email, workspace ID, billing address (if provided), and transaction amounts. QRnaly does not store raw card numbers or CVVs.
Neon Inc.
Managed Serverless PostgreSQL DatabasePurpose: High-availability relational data storage for workspace settings, QR records, salted scan telemetry, and credit ledgers.
Data Handled: Encrypted database records, configuration metadata, and salted telemetry hashes. Protected via SSL/TLS encryption in transit and AES-256 at rest.
Cloudflare, Inc. / Edge Network
DNS, Edge Caching & DDoS MitigationPurpose: Edge routing, SSL/TLS termination, bot filtering, and protection of public shortlink redirection endpoints (/q/[slug]).
Data Handled: Transient HTTP request metadata and IP headers strictly for edge routing and rate limiting.
Google LLC (Google Analytics 4)
Web Traffic Analytics (Optional)Purpose: Aggregated website visitor analytics and checkout conversion funnel analysis. Operates with IP anonymization enabled.
Data Handled: Aggregated page navigation events. Does not receive QR destination URLs, API keys, or scanner personal information. Subject to Google Consent Mode v2.
Microsoft Corporation (Microsoft Clarity)
UX Behavioral Insights (Optional)Purpose: Aggregated UX heatmaps and session interaction analysis to improve website usability.
Data Handled: Aggregated browser interaction events with automatic masking of sensitive input fields.
Subprocessor Updates & Governance
QRnaly maintains strict oversight over all third-party technical providers. Prior to engaging any new subprocessor that handles customer or telemetry data, this directory is updated accordingly.
For subprocessor inquiries or DPA execution: legal@qrnaly.com