Legal notice

AliasQR (“we,” “us”) is a privacy-preserving QR contact relay operated by John Tran as a sole proprietorship in the United States. This notice describes how the relay handles your data, how SMS notifications work, how senders opt in and out, and how to reach us during the private beta. It supplements, and does not replace, our Terms of Service, Privacy Policy, Acceptable Use Policy, and Cookies Notice.

Purpose

AliasQR is a privacy-preserving QR contact relay operated by John Tran as a sole proprietorship in the United States. The service is in private beta and is provided as-is, without warranty of any kind. By using AliasQR you acknowledge that the service is unfinished, may change without notice, may be suspended at any time, and may contain bugs that affect message delivery. Liability is limited to the amount you have paid for the service, which during beta is zero. Continued use after material changes constitutes acceptance of those changes.

Data handling

Owners and senders provide a small set of personal data: email addresses, phone numbers, and the contents of messages exchanged through the relay. All such data is encrypted at rest using AES-256-GCM with per-field authenticated additional data, and is indexed for lookup only via salted HMAC blind indexes. We never store plaintext copies of personal data.

Default message retention is 30 days from the date a thread last received activity, configurable per sticker between 1 and 365 days by the sticker’s claimed owner. Notifications sent over SMS or email contain no message body content — only a secure link to the authenticated AliasQR dashboard, where the owner reads and replies.

To request export or deletion of your data, email founder@aliasqr.com. We respond within five business days. Data subject to a legal hold cannot be deleted until the hold is lifted.

SMS consent & opt-in

Consent to receive SMS. By providing your mobile number and completing the one-time passcode step, you expressly consent to receive recurring transactional SMS from AliasQR — account notifications and, for senders, reply messages from the QR sticker owner you contacted. Consent to receive SMS is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help at any time.

Who is sending these messages. AliasQR, operated by John Tran (sole proprietorship), website aliasqr.com.

What you will receive. Transactional account notifications related to messages exchanged through the AliasQR relay. SMS notifications never contain message body content; they contain only a secure link to the authenticated AliasQR dashboard. As a sender, the first time you complete a QR scan you will also receive a one-time opt-in confirmation SMS, and you may receive recurring transactional reply messages from the QR sticker owner you initiated contact with.

How you opt in. Senders explicitly opt in by physically scanning a registered AliasQR QR sticker, entering a mobile phone number at aliasqr.com, and confirming a one-time passcode delivered to that number via SMS (Twilio Verify). The consent disclosure is shown at the point of collection, on the phone-number entry screen, before the passcode is sent. Owners explicitly opt in by claiming a sticker through the authenticated dashboard and consenting to SMS notifications during account setup. Both opt-in events are timestamped and recorded in our audit log.

Message frequency. Recurring; frequency is event-driven and varies based on how often senders initiate contact (for owners) and how often the owner replies (for senders). There is no scheduled cadence.

Cost. Standard message and data rates may apply from your mobile carrier. AliasQR does not charge you for SMS during beta.

How to opt out. Reply STOP at any time to stop receiving SMS messages from AliasQR. Reply HELP for help. These keywords are handled per CTIA guidelines; opting out via STOP is immediate. To re-enable SMS after opting out, complete the QR-scan and OTP flow again.

Owner SMS notifications — opt-in consent disclosure

Program name: AliasQR account notifications. Who receives these messages: AliasQR account owners — people who registered a QR contact-relay sticker and chose to be notified by SMS when someone scans it and leaves a message.

How owners opt in (double opt-in). An owner signs in to the AliasQR dashboard, opens Settings → Notifications, enters their own mobile number, checks an unticked SMS-consent checkbox displayed directly below the full consent disclosure reproduced verbatim below, and then confirms ownership of that number by entering a one-time passcode texted to it (Twilio Verify). SMS notifications are not enabled until both steps complete. Consent to receive SMS is not a condition of any purchase.

Exact consent language shown at the point of collection. The dashboard opt-in screen displays the following disclosure, word for word, before any verification code is sent:

What the opt-in screen looks like. The opt-in form lives behind the owner’s account login, so an exact replica of the screen is reproduced here for verification:

No third-party marketing. Mobile phone numbers and SMS opt-in consent collected through this program will not be shared with, or sold to, third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are not shared with any third party, except SMS delivery providers acting on our behalf (Twilio Inc.) solely to deliver the messages you requested. See our Privacy Policy.

Terms of Service. The full text-messaging terms for this program — program description, opt-in, message frequency, rates, opt-out, and carrier disclaimers — are published in the AliasQR Terms of Service, §16 SMS / text-messaging terms. The consent checkbox on the opt-in screen links to these Terms at the point of collection.

Support & contact

Support email: founder@aliasqr.com. During beta, we monitor this inbox daily Monday through Friday and aim to acknowledge bug reports within one business day. When reporting a bug, please include the URL where it occurred, the time, and a brief description of what happened. For privacy or data-handling questions, use the same address with the subject prefix “Privacy:” — these are escalated within two business days.