About these terms
QRalo (“QRalo”, “we”, “us”) provides the service described below. The publisher and host of qralo.com are identified in the legal notice at the end of this page.
By creating an account or using a paid plan, you accept these terms. If you use QRalo on behalf of an organization, you confirm that you are allowed to bind it, and “you” means that organization. Scanning and verifying a QRalo code does not require an account; only the sections on acceptable use, availability and liability apply to that use.
Our Privacy Policy explains how we handle personal data.
The service
QRalo lets an organization create QR codes whose content is digitally signed with a key specific to that organization (Ed25519 signature). When someone scans a code, the QRalo verification page checks the signature and the code’s status (active, expired or revoked), shows the destination, and runs automated link checks before the person continues.
The service has the following limits:
- A signature proves which QRalo account signed a code and that its content has not been changed. Nothing is encrypted, so anyone can read the content of a code.
- Organization names are provided by account holders. QRalo does not check the identity of organizations, except that an account can prove control of a domain name with a DNS TXT record.
- The automated link checks are heuristics and public threat lists. They give a risk indication and can be wrong. They do not guarantee that a website is safe.
- QRalo cannot stop someone from sticking a different QR code over yours. It makes fake codes easier to spot for people who check the verification page.
- The destination is part of the signature. It cannot be changed after the code is created: to change it, revoke the code and create a new one.
- Verification requires an internet connection and depends on QRalo’s servers being available.
We may improve, change or remove features over time. Features described as planned or “not available yet” are not part of any plan until they are released.
Your account
- You must be at least 18 years old and give accurate information, including your organization’s name.
- You must not use a name, logo or domain that you are not entitled to use, or that is likely to make people believe your codes come from someone else.
- You are responsible for keeping your sign-in details confidential and for everything done with your account. Tell us promptly at contact@qralo.com if you think it has been compromised.
- QRalo generates and stores your organization’s signing key on your behalf. You cannot export it, and we use it only to sign codes you create.
Plans and limits
The plans and prices in force are those shown on our pricing page when you subscribe. Currently:
- Free (€0): up to 3 active signed codes and 100 scans per code. When a code reaches 100 scans, the verification page shows it as paused until the organization upgrades. Code creation is limited to one code per minute.
- Business (€9.99 per month): unlimited codes and scans within fair use, a custom logo in your codes, advanced analytics with a scan map, and CSV and JSON exports.
- Operators & public sector: guided pilots and services agreed in a written quote or contract, which take precedence over these terms where they differ.
“Fair use” means using the service for your own codes in a normal way. Technical rate limits apply to all plans (for example, 20 code creations per 15 minutes from the same IP address) and may be adjusted to protect the service.
Payment and billing
On the web
- Business is a monthly subscription paid in advance by card through Stripe. It renews automatically each month until canceled. The amount charged is shown on the Stripe checkout page before you confirm.
- You can cancel at any time, without commitment, from the Stripe billing portal (Settings → Billing in your dashboard). Cancellation takes effect as shown in the portal; the current period already paid is not refunded, except where the law requires it.
- If a payment fails, Stripe retries it and we notify you by email. If the subscription ends, your organization moves back to the Free plan. Your codes are not deleted, but Free limits apply again.
- Your payment history is available from the Stripe billing portal. For invoice details, email contact@qralo.com.
In the iOS app
Subscriptions bought in the iOS app are sold and billed by Apple under Apple’s terms. Prices in the App Store may differ from web prices. You manage and cancel them in your Apple account settings, and refund requests go to Apple. When an App Store subscription expires or is refunded, your organization moves back to the Free plan.
Price changes
We may change our prices. For an existing subscription, a new price applies only from a renewal after we have notified you by email at least 30 days in advance. If you don’t agree, you can cancel before the new price applies.
Right of withdrawal
If you are a consumer in the European Union, you may have a legal right to withdraw from a paid subscription within 14 days of subscribing. To exercise it, email contact@qralo.com with a clear statement of your decision. We will refund you within 14 days. If you asked us to start the service during the withdrawal period, we may deduct an amount proportionate to the period used before you withdrew. This right does not apply to purchases made for professional purposes.
Acceptable use
You must not use QRalo to:
- send people to phishing, fraudulent, malicious or illegal content;
- impersonate another person, company or public body, or mislead people about who issued a code;
- distribute malware or collect payment or login details under false pretenses;
- infringe anyone’s intellectual property or other rights;
- interfere with the service, including by generating artificial scans, overloading it, bypassing plan limits or rate limits, or trying to access other accounts or signing keys;
- build a competing service by copying QRalo or scraping it.
If we have reasonable grounds to believe that a code or an account breaks these rules, we may revoke codes, suspend or close the account, and cooperate with the competent authorities. When a public threat list reports the destination of a genuine code as malicious, that code is revoked automatically. Security testing is welcome under the rules on our Security page.
Your content
You remain responsible for your codes, their destinations, the websites they lead to, your logo and the way you display codes in the physical world. You keep all rights to your content and give QRalo the rights needed to host, process and display it to provide the service, including showing your organization name, the destination and the code’s status to anyone who verifies it.
QRalo, its software, design and brand belong to QRalo. These terms do not give you any right to them other than using the service.
Availability
We work to keep QRalo available and secure, but we do not guarantee uninterrupted service and we offer no service-level agreement under these terms. We may interrupt the service for maintenance, preferably at quiet times. If we decide to discontinue QRalo, we will give account holders reasonable notice by email.
Liability
- The service is provided as described in these terms. In particular, QRalo is not responsible for the content of websites that codes lead to, for codes placed or covered by third parties, or for decisions people make after a link check.
- For professional customers, QRalo is not liable for indirect losses (such as loss of revenue, data or reputation), and QRalo’s total liability is limited to the amounts you paid us in the 12 months before the event giving rise to the claim.
- Nothing in these terms limits liability that cannot be limited by law, or the rights of consumers under mandatory consumer law.
Termination
You can delete your account at any time from your dashboard settings. Deletion cancels any active Stripe subscription and permanently deletes your organization, codes, scan history and signing key. It cannot be undone, and codes you have printed will no longer verify. App Store subscriptions must be canceled separately with Apple.
We may suspend or close an account that seriously or repeatedly breaks these terms. Except in urgent cases (fraud, security risk, legal requirement), we will tell you first and give you a chance to respond.
Changes to these terms
We may update these terms. We will change the date at the top, and tell account holders by email about material changes before they apply. If you don’t accept the new terms, you can stop using the service and delete your account.
Governing law
These terms are governed by French law. Before going to court, please contact us so we can try to resolve the issue. If you are a consumer, you keep the protection of the mandatory rules of your country of residence and may bring a claim before the courts where you live. Disputes between professionals fall under the jurisdiction of the competent French courts.
If you are a consumer, you can refer a dispute free of charge to our consumer mediator: [name, website].
Contact
Questions about these terms: contact@qralo.com.
Legal notice
qralo.com is published by [legal name], [legal form] with a share capital of [amount], registered at [RCS city] under SIREN [number], [registered address]. VAT number: [number or “VAT not applicable, art. 293 B CGI”].
Publication director: [name].
Hosting: Hetzner Online GmbH, Germany, [address, phone].