Datenschutz

Last updated: July 10, 2026

This Privacy Policy explains how Atlodin LLC ("we", "us", or "our") collects, uses, and protects personal data when you use Scanlayer (the "Service"), including our website, dashboard, guest pages, and APIs.

1. Who we are

Scanlayer is a smart QR and NFC placement analytics platform operated by Atlodin LLC.

• Legal entity: Atlodin LLC
• Adresse: 30 N Gould St, Ste N, Sheridan, WY 82801, United States
• Product website: https://scanlayer.io
• Company website: https://atlodin.com/
• Privacy contact: [email protected]

2. Data we collect

Depending on how you use the Service, we may collect:

• Account data: name, email address, password (stored hashed), profile details, and authentication identifiers when you sign in with email or OAuth providers (such as Google or X).
• Workspace and team data: workspace name, business profile (name, phone, fax, email, logo), team member roles, invitation records, and agency pool allocations when you use an Agency plan.
• Smart link and placement data: link names, destinations, routing rules, placement labels, NFC/QR configuration, and downloadable asset metadata.
• Template and content data: menus, monthly menus, events, appointments, contact cards, lost-and-found tags, feedback pools, product catalogs, Google Review settings, and other template-specific content you publish.
• Billing data: subscription plan, workspace and template entitlements, billing address (street, city, state or region, postal code, country), billing country, billing currency, Stripe customer and subscription identifiers, invoice references, promotion redemptions, and payment status. Card details are processed by Stripe; we do not store full card numbers.
• Usage and analytics data: scan and tap events, timestamps, placement identifiers, device type, browser user agent, referrer, approximate location derived from IP (when available), and rule outcomes for smart routing.
• Guest interaction data: form submissions (contact, appointment booking, lost-item reports, menu subscriptions, event photo uploads), when visitors use your published pages.
• Support and communications: messages you send to us and records of support requests.
• Technical data: IP address, cookies, session identifiers, and server logs needed to operate and secure the Service.

3. How we use your data

• Provide, operate, and improve the Service, including workspace plans, template modules, smart routing, and analytics.
• Process subscriptions and payments through Stripe, including workspace plans (Free, Starter, Pro, Business, Agency), template subscriptions, bundles, extra link slots, and limited-time free promotional offers.
• Track promotional redemptions (for example, one free bundle per account), subscription periods, and entitlement expiry where applicable.
• Display prices in USD, EUR, or TRY based on billing country, billing currency settings, or locale where applicable.
• Authenticate users, manage team access, and enforce plan limits and entitlements.
• Send transactional emails (account, billing, team invitations, notifications) and optional product communications where permitted.
• Monitor performance, prevent abuse, and maintain security.
• Comply with legal obligations and respond to lawful requests.

4. Legal bases (where applicable)

If you are in a jurisdiction that requires a legal basis (such as the EU/UK), we rely on: contract performance (providing the Service); legitimate interests (security, analytics, product improvement); consent (where required for cookies or marketing); and legal obligation.

5. Sharing and subprocessors

We do not sell your personal data. We share data with trusted providers who process it on our behalf, including:

• Stripe — payment processing, subscription management, and customer billing portal
• Hosting and infrastructure providers — application hosting, databases, and background job processing
• Object storage providers — media uploads, QR assets, event photos, and workspace logos
• Email delivery providers — transactional and notification email
• Google — OAuth sign-in, Google Places data when you use the Google Reviews template, and Google Tag Manager when you allow analytics cookies or configure tags on smart links
• OAuth providers — when you choose to sign in with Google or X
• ERPNext — optional accounting mirror of paid Stripe subscription invoices when this integration is enabled

We may also share data when required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale, with appropriate safeguards.

6. International transfers

We may process and store data in the United States and other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

7. Retention

We retain personal data for as long as your account is active or as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Analytics and guest interaction data may be retained according to your plan limits and workspace settings. You may request deletion subject to legal and operational requirements.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority.

To exercise your rights, contact us at [email protected]. We may need to verify your identity before responding.

9. Cookies and similar technologies

We use cookies, local storage, and session storage for authentication, security, preferences, checkout, and—only with your consent—analytics. See our Cookie Policy to manage preferences.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the Service or by email where appropriate.

12. Contact

For privacy questions or requests, contact [email protected] or Atlodin LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States.