Legal
Last updated: 1 August 2026
QRHero.com and the QR Hero service are provided by Etcetera Digital LLC, 30 N Gould St., Suite 2413, Sheridan, WY 82801, USA. This page lists the sub-processors we use to provide the Service, as referenced in our Data Processing Agreement and Privacy Policy.
We keep this list deliberately short: our support helpdesk, error monitoring, and infrastructure observability run on self-hosted software on our own servers, so no third party is involved in those functions.
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard |
|---|---|---|---|---|
| Hetzner Online GmbH | Server hosting and off-site backups | All Service data | Germany / Finland (EU) | Processing within the EU |
| Cloudflare, Inc. | Content delivery, DNS, DDoS protection, SSL for custom domains, bot protection (Turnstile) | Traffic metadata (IP addresses, request headers) passing through the edge network | Global edge network (US company) | Standard Contractual Clauses |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Payment processing | Billing contact details, payment method data, transaction data | US / Ireland | Standard Contractual Clauses |
| Brevo (Sendinblue SAS) | Transactional email delivery (account, billing, and system emails) | Recipient name and email address, email content | France (EU); transfers to the USA and India | Standard Contractual Clauses / EU-U.S. Data Privacy Framework |
| Sinch (Mailgun Technologies, Inc.) | Transactional email delivery (account, billing, and system emails) | Recipient name and email address, email content | EU sending region (US company) | Standard Contractual Clauses |
| Anthropic, PBC | AI-assisted features (only when you use them) | Content you submit to AI features | USA | Standard Contractual Clauses |
| Google LLC | Optional “Sign in with Google”; automated link-safety checking (Safe Browsing) | Google account identifier (sign-in only); destination URLs (safety checks) | USA / global | Standard Contractual Clauses |
Where a customer connects their own AI provider keys, tracking pixels, or other third-party integrations, those providers act on the customer’s behalf under the customer’s agreements with them, and are not QR Hero sub-processors.
We will notify customers of intended additions or replacements at least 14 days in advance - by updating this page and emailing account owners - as described in section 7 of the Data Processing Agreement. Customers may object on reasonable data protection grounds.
Questions: privacy@qrhero.com