Privacy Policy

Adscano helps brands and agencies make their offline advertising measurable. This policy covers two groups of people: the businesses who use Adscano to run campaigns, and the people who scan those campaigns' QR codes, images or short links. It explains what we collect, why, and what you can do about it.

1. Who we are

Adscano is a product of Nexivara, which operates it from India (GSTIN 08AWPPB6630G2ZH). In this policy “we” and “us” mean Nexivara.

For any privacy question or request, write to hello@adscano.com.

Registered address: Nexivara, D-102, Green Oak, Meera Marg, Banipark, Jaipur, Rajasthan 302016, India.

2. What we collect from businesses using Adscano

• Account: your name and email address. If you sign in with Google, we receive your Google name and email. Passwords are handled by Google's Firebase sign-in service; we never see them.
• Workspace: whether you are a brand or an agency, the workspace name, and any logo and brand colour you add.
• Billing: payments are processed by Razorpay. We receive a payment reference and the plan you bought, never your full card or bank details.
• Your campaigns: the text, images, form settings and brand assets you create in Adscano.
• Usage: which pages you open and which features you use, plus error reports, so we can fix problems and improve the product. See section 6 for how this works and how to opt out.

3. What we collect from people who scan an ad

When you scan a campaign's QR code, point your camera at its image, or open its short link, we record the following on behalf of the brand that ran the ad:

• The visit itself: the time, your type of phone and browser (for example “Android, Chrome”) and, where we estimate it, your approximate city. To estimate the city we check your internet (IP) address in a location database we host ourselves (IP Geolocation by DB-IP), so your address is never sent to anyone else. We keep only the resulting city, region and country, not the address itself.
• A duplicate-visit marker: so one person scanning twice is not counted as two people, we keep a scrambled one-way code made from the anonymous Adscano ID described below (or, if that isn’t ready yet, from your network address and browser). It cannot be turned back into your ID or address, and it is deleted after 90 days.
• Your scan history: your browser is given an anonymous Adscano ID (no name or email) so you can see the ads you have scanned and any rewards at adscano.com/me. If you choose to sign in with Google there, that history is linked to your Google account.
• The form, if you fill it in: whichever details the brand asks for, usually your name and phone number, sometimes your email, city, company or an answer to the brand's question. The form shows you the brand's name and asks for your consent before you submit.

We do not sell personal data. The brand decides what happens to the details you give it: under India's Digital Personal Data Protection Act 2023 the brand is the Data Fiduciary and Adscano acts as its Data Processor.

4. Camera images when you scan a picture

Some ads can be scanned by pointing your phone camera at the printed picture on our scanner page (scan.adscano.com). While the scanner is open, still images from your camera are sent to our servers so we can check whether they match the ad. They are processed in memory and thrown away straight after the check. We do not save them, and they are not used to identify you.

5. Why we use this information

• To run the service: show campaigns, record scans and deliver leads to the brand.
• To bill workspaces on paid plans and send invoices.
• To keep the service secure and stop spam, fraud and abuse.
• To understand which features are used so we can improve them.
• To send you service emails, such as lead alerts and billing notices.

6. Cookies, analytics and how to opt out

Staying signed in. We store a sign-in token in your browser so you do not have to log in on every visit, and we remember small preferences such as the language you picked on a campaign page.

Usage analytics. We use Google Analytics for Firebase on adscano.com, including campaign and scanner pages, to count visits and see which features are used. It sets first-party cookies and stores an identifier in your browser, and Google processes this data for us. We do not use advertising pixels such as the Meta Pixel on our pages.

You can opt out of analytics at any time, and Adscano keeps working if you do:

• Install Google's Google Analytics opt-out browser add-on.
• Block or delete cookies for adscano.com in your browser settings.
• Use a browser or extension that blocks analytics scripts.

We also respect the Global Privacy Control and Do Not Track settings in your browser. If either is switched on, analytics does not start at all on adscano.com: no visit or feature counts are recorded and no analytics cookies are set.

7. Who we share data with

We share data only with the service providers we need to run Adscano, and only for that purpose:

• Google Cloud and Firebase: hosting, database, file storage, sign-in and analytics.
• Razorpay: payments for paid plans.
• Our email delivery provider: sending lead alerts, invoices and account emails.

Leads go to the brand or agency that ran the campaign, and to any integration (for example a spreadsheet or CRM) that workspace has connected. We may also disclose data where Indian law requires it.

8. Where your data is stored

Adscano runs on Google Cloud (Firebase). Our servers run in Google's Mumbai region in India. Some data may be stored or backed up in Google data centres outside India, including in the United States, under Google's security and data-protection commitments.

9. How long we keep it

• Leads stay available to the workspace until the workspace deletes them or closes its account.
• Scan records are kept for at least 12 months so brands can compare campaigns over time.
• Duplicate-visit markers are deleted after 90 days.
• Account data is deleted within 30 days of a request to close the account.

10. Your rights

Under the Digital Personal Data Protection Act 2023 you can ask to access, correct or erase your personal data, withdraw consent you have given, and nominate someone to act for you. Email hello@adscano.com. If your request is about a lead form you filled in, we pass it to the brand that ran the campaign, because the brand decides how those details are used, and we help them act on it.

Grievance Officer. Karan Bindal, Nexivara, D-102, Green Oak, Meera Marg, Banipark, Jaipur, Rajasthan 302016, India. Email hello@adscano.com, phone +91 96363 69360 (Monday to Friday, 10:00 to 18:00 IST).

Complaints. Send any privacy complaint to hello@adscano.com and we will reply within 1 working day. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

11. Security

• All traffic to Adscano is encrypted in transit (HTTPS).
• Sign-in is handled by Google's Firebase Authentication; we never store readable passwords.
• Each workspace's data is walled off from every other workspace's by access rules enforced on our servers, so one customer cannot see another's leads.
• Messages we send to the systems you connect carry a signature, so your systems can check they really came from us.

We do not hold a formal security certification (such as SOC 2) today. If your procurement process needs one, contact us and we will describe our current security practices in writing.

12. Children

Adscano is a business tool and is not directed at children. A brand whose campaign may reach children is responsible for getting any parental consent the law requires before collecting a child's details.

13. Changes to this policy

When we make a material change we update this page and the “Last updated” date above. For significant changes we also email every workspace owner.