Acceptable use policy

1.Scope

This policy applies to everyone who uses QRiva, and to everything created, published, linked to or sent with it: QR codes, short links and their destinations, pages, digital business cards, forms, product passports, uploaded files, messages, automations, integrations and use of the API (together, Content).

The workspace's customer is responsible for all Content in its workspace and for everyone it gives access to, whether or not it knew about a breach.

2.Content that is not allowed

You may not use QRiva to create, publish, link to, store or send Content that:

• is illegal under the law of the European Union, of Romania, or of the country where it is published or aimed;
• sexually exploits or endangers children in any way; we report such Content to the competent authorities and close the account without notice;
• promotes or supports terrorism or violent extremism, incites violence or hatred against people because of a protected characteristic, or glorifies serious violence;
• is phishing, malware, spyware, a scam, a fake login or payment page, a cryptocurrency or investment scheme promising returns, or anything designed to trick people into giving money, credentials or personal data;
• hides the real destination of a code or link, sends visitors through redirect chains to avoid screening, or shows different content to our checks than to visitors;
• impersonates a person, brand, company or public authority, or falsely suggests endorsement by one;
• infringes copyright, trade marks, designs, patents, trade secrets, image rights or other rights of anyone else, or offers counterfeit goods;
• is false or misleading about a product, including product passports with inaccurate composition, origin, safety, conformity, repair, recycling or environmental information, unsubstantiated environmental claims, or sustainability labels not based on a certification scheme;
• is sexually explicit or pornographic;
• offers gambling, weapons, explosives, drugs, prescription medicines, tobacco or nicotine products, or other regulated goods or services without the licences the law requires, or to people who may not lawfully buy them;
• harasses, threatens, bullies, defames or discloses private information about another person;
• collects personal data without a lawful basis or without the information the law requires; collects payment card numbers other than through the payment field we provide, or passwords; or collects government identification numbers, or health, biometric, genetic or other special categories of personal data, unless the law allows you to (Article 9 GDPR for special categories, and national rules such as Romanian Law 190/2018 for identification numbers), which remains entirely your responsibility;
• is unsolicited commercial communication, or uses QRiva to send bulk messages to people who have not agreed to receive them.

3.Conduct that is not allowed

You may not:

• get around plan limits, usage limits, rate limits, screening or other security measures, including by opening several free workspaces for the same business;
• access, or try to access, data or accounts that are not yours;
• probe, scan or test the vulnerability of QRiva, or load-test it, without our written permission;
• copy, scrape, frame or mirror QRiva or its content by automated means, or decompile or reverse-engineer it, except to the extent the law allows despite this restriction;
• use QRiva to build or train a competing product, or to benchmark it for publication without our written permission;
• resell, sublicense, rent or white-label QRiva outside the features of your plan without a written agreement with us;
• share sign-in links, passkeys or API keys, or let more people use a workspace than your plan's seats allow;
• use QRiva in a way that harms its operation, its reputation, its domains' standing with browsers, e-mail providers or security vendors, or other customers.

4.How we check

We screen destinations automatically when they are saved and regularly afterwards, using our own rules and external threat lists, and we review reports. We are not obliged to monitor Content, and we do not check it before it is published. Screening does not make us responsible for Content or confirm that it is lawful.

5.What we may do

If we believe, in our reasonable judgement, that Content or conduct breaks this policy, the Terms or the law, or exposes QRiva, its customers or the public to risk, we may, without prior notice where the risk requires it:

• show visitors a warning before the destination, block a destination, or pause a code, link or page;
• remove or disable access to Content;
• restrict features, sending or API access for the workspace;
• suspend or close the account and the workspace;
• keep the Content and related records as evidence, and pass them to the competent authorities where the law requires or allows it.

Which measure we choose is at our discretion and depends on how serious the breach is, whether it is repeated, and the risk to others. We are not liable for any loss caused by a measure taken in good faith under this policy, including the cost of reprinting codes. Fees already paid are not refunded when a workspace is suspended or closed because of a breach.

6.Reporting illegal content

Anyone can tell us about Content they believe is illegal or breaks this policy, using “Report this page” on the page itself or by writing to support@qr-iva.com. Under Article 16 of the EU Digital Services Act, a report should include:

• why you believe the Content is illegal or breaks this policy;
• the exact web address or the code where it appears;
• your name and e-mail address, except for reports of child sexual abuse material;
• a statement that you believe in good faith that the report is accurate and complete.

We confirm receipt when you give us an e-mail address, decide on the report in a timely, careful and objective way, and tell you what we decided. We may use automated tools to process reports. We may stop processing reports from people who repeatedly send reports that are clearly unfounded.

Reports of intellectual property infringement should come from the rights holder or its representative and identify the right concerned.

7.If we act on your Content

When we remove or restrict Content, or suspend an account, we tell the customer by e-mail or in the app what we did, the facts and the rule or law it was based on, whether automated means were used, and how to ask for a review, unless the law or a public authority prevents it, or the Content is deceptive commercial content sent in high volume.

You can ask us to review a decision within 6 months by writing to support@qr-iva.com. A person at QRiva reviews the request, and we tell you the outcome. If the decision was wrong, we reverse it without delay. This does not affect your right to go to court.

8.Authorities and points of contact

Our single point of contact for authorities of the EU Member States, the European Commission, the European Board for Digital Services and users of QRiva under Articles 11 and 12 of the Digital Services Act is support@qr-iva.com. We communicate in English and Romanian.

We act on orders against illegal content and orders to provide information issued by competent authorities under the Digital Services Act and national law, and we tell the authority how we acted on them.

9.Changes

We may change this policy to respond to new kinds of misuse, legal requirements or decisions of authorities. Changes apply from the date shown at the top of the page.