Privacy

URLQ connects a printed code to a web page and gives the business that printed it a record of the interest it produced. This page describes exactly what that involves.

Version 2026-08-15-draft

Pending owner approval

This page is an accurate description of what URLQ does with data today. It has not yet been reviewed and approved by the operator, and it deliberately states no retention period, processor commitment, or other undertaking that has not been decided. Treat any point below marked not yet decided as open.

When you scan a code or open a property page

The redirect and the page record that a scan and a page view happened, which printed placement they came from, your browser’s user-agent string, and the country Cloudflare reports for the connection.

Your IP address is not stored. It is combined with a secret salt and hashed, and only that hash is written. The hash lets URLQ tell one visitor’s actions apart within a listing; it cannot be turned back into an address.

Browsing a property page does not create a contact record, does not tell the agent who you are, and does not subscribe you to anything.

When you send your details

A contact form sends what you type — typically a name, a phone number, an optional email address or messaging ID, how interested you are, and any message — to the business that published that listing. That business, not URLQ, decides how to follow up.

Automated follow-up messages are separate and off unless you tick the follow-up box. Every follow-up email carries an unsubscribe link, and every follow-up text can be stopped by replying STOP.

Who else processes this data

URLQ runs on services that necessarily see some of it:

  • Cloudflare — serves the redirect and the public pages, and reports the connection country.
  • Resend — delivers email that URLQ sends.
  • Twilio — delivers text messages, where a business has enabled them.
  • Stripe — handles payments, where a page collects one. Card details go to Stripe directly and are never stored by URLQ.
  • OpenAI — turns activity into a short written summary for the business.

What is sent to OpenAI

Two features use OpenAI: a plain-language activity summary for the business, and a draft follow-up message that a person reviews before sending. The payload for both is deliberately reduced. It contains scan, visit, and enquiry counts, the listing’s own details, a first name, an interest level, a status, and any message you typed.

It does not contain your phone number, email address, messaging ID, database identifier, or the business’s private notes about you.

Not yet decided — whether URLQ will additionally adopt OpenAI’s stricter data-retention controls before the product is used with real visitor data at scale.

How long data is kept

Not yet decided — retention periods for interaction events, contact records, and generated summaries. No period is stated here because none has been set. Until one is published, assume records are retained for as long as the business’s account is active.

Your choices

You can decline to submit a form and still read every property page. You can leave the follow-up box unticked and still send an enquiry. You can unsubscribe from follow-up messages at any time using the link in the message.

Not yet decided — the contact route and response commitment for access, correction, and deletion requests. Until one is published, contact the business whose listing you used.