Terms of Service

1Article 1 — Purpose

The iziqrcode Service allows users (the "Customer" or "User") to generate, customize, edit, and statistically track QR codes for commercial or personal use. The Service is delivered online, requires no software installation, and works on any modern web browser.

2Article 2 — Subscription and plans

The Service is offered under three plans:

• Free plan: free, no commitment, limited to 3 static QR codes (not editable, not tracked).
• Pro plan: €9 excl. VAT/month or €90 excl. VAT/year, including 50 tracked QR codes (editable URL and analytics), unlimited static QRs, and multi-format export. A free 14-day trial is offered without requiring a credit card.
• Business plan: €29 excl. VAT/month or €290 excl. VAT/year, including 500 tracked QR codes, public REST API access, signed webhooks, personal onboarding, and priority support.

Annual subscriptions are paid upfront for 12 months at a rate equivalent to 10 months (2 months free).

3Article 3 — Pricing and billing

All prices are displayed excluding VAT. Applicable VAT is calculated and added automatically at checkout, according to the tax law of the Customer's country of residence (OSS Union scheme for B2C sales within the European Union).

Businesses with a valid intra-EU VAT number verified via VIES benefit from the reverse charge mechanism (VAT not applicable, art. 196 of Directive 2006/112/EC).

Payments are processed by Stripe Payments Europe Ltd (Ireland). The Provider never has access to complete bank card data. A compliant invoice is emailed at each billing cycle.

Prices may be revised. Any pricing change is notified to the Customer by email at least 30 days before it takes effect. The Customer retains the right to cancel without fees before the new price applies.

4Article 4 — Term and termination

The Pro or Business subscription is concluded for the chosen period (monthly or annual) and renews automatically and tacitly at the end of each period.

The Customer may cancel the subscription at any time from their account. Cancellation takes effect at the end of the current period (month or year).

No prorated refund is due for the current period. No further charges will be billed after the cancellation date.

The Provider reserves the right to suspend or terminate an account in case of breach of these Terms, abusive or fraudulent use, or use contrary to public order.

5Article 5 — Right of withdrawal (B2C)

Under EU Directive 2011/83/EU on consumer rights and the Spanish law transposing it, the consumer Customer has a 14-day right of withdrawal starting from the subscription of a paid plan.

However, by requesting immediate access to and use of the Service, the consumer Customer expressly waives this right under art. 16(m) of Directive 2011/83/EU, the Service being digital content supplied on a non-tangible medium whose performance began with the consumer's prior express consent.

This waiver is explicitly requested at subscription via a dedicated checkbox. It does not apply during the free trial, during which no payment is made.

6Article 6 — Customer obligations

The Customer agrees to:

• Provide accurate and up-to-date information when creating their account;
• Keep login credentials confidential;
• Not use the Service for unlawful, fraudulent, or immoral purposes;
• Not generate QR codes that redirect to illegal, malicious, child-pornographic, hate-inciting content, or content infringing third-party rights;
• Not attempt to bypass the technical limits of the chosen plan;
• Not use the Service for mass spam or phishing.

Any breach may result in immediate account suspension without notice or refund.

7Article 7 — Intellectual property and usage restrictions

Ownership of the Service: all elements of the Service (source code, interfaces, design, trademarks, logos, domain names, databases, editorial content, documentation) are the exclusive property of the Provider or its licensors and are protected by applicable intellectual property rights (copyright, trademark law, sui generis database right).

Licence granted to the Customer: subject to payment of the applicable fees and compliance with these Terms, the Provider grants the Customer a personal, non-exclusive, non-transferable, non-sublicensable licence, limited to the duration of the subscription and to the functional scope subscribed, for the sole purpose of using the Service in accordance with its intended purpose.

Customer content: the Customer retains all rights over content published through the Service (destination URLs, uploaded logos, labels, etc.). The Customer grants the Provider a non-exclusive, worldwide, royalty-free licence, strictly limited to what is necessary to host, process, serve, back up and display such content as part of the Service, for the duration of the contractual relationship.

Usage restrictions: unless expressly authorised in writing by the Provider, the Customer agrees not to:

• copy, reproduce, decompile, disassemble, reverse engineer, modify or create derivative works of the Service or any part thereof;
• resell, rent, sublicense, distribute, host or commercially exploit the Service to third parties, including in white-label or embedded-reseller form;
• circumvent or attempt to circumvent technical limitations, quotas, security measures or authentication controls of the Service;
• use automated means (scrapers, bots, crawlers) to bulk-extract data from the Service beyond documented and authorised APIs;
• use the Service to host, distribute or point to unlawful, infringing, defamatory, pornographic, hateful content or content that infringes the rights of third parties;
• use the Service for phishing, fraud, malware distribution or any activity contrary to applicable law.

Any material breach of these restrictions may result, without prejudice to any other right or remedy of the Provider, in immediate suspension of the account and termination of the contract under the general conditions for termination for cause, with no refund of prepaid amounts.

7bisArticle 7bis — Warranty against eviction and indemnification

Business Customers (B2B): a Customer acting for professional purposes undertakes to indemnify, defend and hold harmless the Provider, its officers, employees and sub-processors, from any claim, action, loss, damage, cost or expense (including reasonable legal fees) arising out of:

• any content published or distributed by the Customer through the Service (destination URLs, logos, texts, uploaded files);
• any breach by the Customer of these Terms, of the DPA or of applicable law;
• any use of the Service in breach of the restrictions in Article 7;
• any infringement of third-party rights (intellectual property, privacy, image rights, competition law) resulting from the Customer's content or usage.

The Provider shall promptly notify the Customer of any such claim and allow the Customer, at its own cost, to lead the defence, it being understood that the Provider retains the right to participate in the defence with its own counsel.

Consumer Customers (B2C): in accordance with mandatory consumer-protection rules applicable in the European Economic Area, the indemnification clause above does not apply to consumer Customers. Consumer liability remains governed by the general rules (fault-based liability), within the limits and according to the rules mandatorily applicable at the consumer's place of residence.

Reciprocal warranty by the Provider: the Provider warrants the Customer the peaceful enjoyment of the Service against any third-party claim of intellectual-property infringement based on the Service itself (and not on Customer content or unauthorised combinations with other software). In the event of such a claim, the Provider may, at its option: (i) obtain for the Customer the right to continue using the Service, (ii) modify the Service to make it non-infringing, or (iii) terminate the contract with a pro-rata refund of prepaid unconsumed amounts.

8Article 8 — Availability and liability

The Provider endeavours to ensure 99.5% average monthly Service uptime, excluding scheduled maintenance announced in advance. No contractual SLA is committed on Free and Pro plans.

The Provider's liability cannot be engaged in cases of:

• Force majeure (Internet outage, third-party provider failure, events beyond reasonable control);
• Misuse by the Customer;
• Content pointed to by generated QR codes;
• Data loss resulting from Customer negligence (QR deletion, account closure).

The Provider's total cumulative liability, all causes combined, is capped at the amount paid by the Customer over the 12 months preceding the triggering event.

8bisArticle 8bis — Indicative service level (Business plan)

For Customers subscribing to the Business plan, the Provider sets itself an internal Service availability target of 99.5% average monthly, measured on the main scan-and-redirect QR code path, excluding scheduled maintenance announced in advance and excluding force-majeure events.

The Parties expressly agree that this target is a best-efforts undertaking, not a result obligation, and does not, in and of itself, give rise to any automatic penalty, service credit, contractual rebate or lump-sum indemnification. No contractually enforceable SLA is committed in the present version of these Terms.

The Business Customer may, upon request to [email protected], obtain a quarterly observed-availability report listing recent major incidents.

The Provider reserves the option to introduce, in a future version of these Terms or via a separate Service Level Agreement addendum, a contractual SLA with service credits in case of failure to meet the target. Where such an addendum is signed, it shall prevail, within its scope, over the provisions of this article.

9Article 9 — Personal data

Processing of the Customer's personal data is governed by the Privacy Policy, which forms an integral part of these Terms. The Customer is invited to review it before subscribing.

9bisArticle 9bis — Data Processing Agreement (DPA)

Where the Customer processes, through the Service, personal data of third parties (in particular the end recipients of the QR codes: visitors scanning a code, restaurant customers, professional contacts, etc.), the Customer acts as Data Controller and the Provider acts as Data Processor within the meaning of Article 28 GDPR.

Accordingly, the Parties agree that the Data Processing Agreement (DPA) published at iziqrcode.com/en/dpa forms an integral part of these Terms and applies automatically to any relationship involving such processing. The Customer acknowledges having reviewed the DPA before subscribing and accepts its terms without reservation.

The DPA specifies in particular: the nature and purpose of processing, the categories of data and data subjects, the duration of processing, the technical and organisational security measures implemented by the Provider, the terms under which the Provider assists with data subject rights requests, and the conditions for returning and deleting data at the end of the contract.

The Provider undertakes to notify the Customer of any personal data breach within a maximum of 72 hours after becoming aware of it, in accordance with Article 33 GDPR.

9terArticle 9ter — Sub-processors

The Customer expressly authorises the Provider to engage sub-processors to deliver the Service. The up-to-date list of sub-processors, their location, role, and the safeguards applicable to transfers outside the European Economic Area are published and maintained at iziqrcode.com/en/dpa#subprocessors.

The Provider undertakes to:

• contractually impose on each sub-processor data protection obligations substantially equivalent to those set out herein and in the DPA;
• notify the Customer of any intended addition or replacement of a sub-processor at least 30 days before it takes effect, by updating the above page and by email to the Customer;
• frame transfers outside the EEA through the European Commission's Standard Contractual Clauses (decision 2021/914) or any equivalent mechanism recognised under the GDPR.

The Customer has a reasonable right to object. In the event of a reasoned objection on data protection grounds, the Parties shall endeavour in good faith to find an alternative solution. Failing agreement within 30 days, the Customer may terminate the contract without penalty, with a pro-rata refund of any prepaid unconsumed amounts.

10Article 10 — Changes to the Terms

The Provider reserves the right to amend these Terms. Any material change is notified to the Customer by email at least 30 days before it takes effect. The Customer may cancel without fees before that date if they do not accept the new conditions.

11Article 11 — Governing law and jurisdiction

These Terms are governed by Spanish law.

Any dispute concerning their interpretation or execution falls under the exclusive jurisdiction of the courts of Madrid, subject to mandatory provisions applicable to consumers residing in the European Union, who may bring proceedings before the courts of their place of residence.

Consumer Customers may also use the European Online Dispute Resolution platform at: https://ec.europa.eu/consumers/odr

12Article 12 — Confidentiality

In the course of the performance of these Terms, each Party may receive from the other Party confidential information, namely any non-public information disclosed by the other Party in writing, orally or by any other means, which is marked as confidential or which, by its nature or the circumstances of disclosure, should reasonably be treated as such (including: unpublished technical data, financial data, product roadmaps, customer data, credentials, trade secrets, content of support exchanges, specific configurations).

Each Party undertakes, for the duration of the contract and for three (3) years after its termination for any reason:

• to keep the other Party's confidential information strictly confidential;
• to use such information only for the purpose of performing the contract;
• to disclose its content only to persons (employees, subcontractors, advisors) with a legitimate need to know for the performance of the contract, and provided that they are themselves bound by a confidentiality obligation at least equivalent;
• to apply reasonable protection measures at least equivalent to those it applies to its own confidential information of a similar nature.

The obligations of this article do not apply to information that: (i) is or becomes public without breach by the receiving Party, (ii) was lawfully in the possession of the receiving Party prior to disclosure without obligation of confidentiality, (iii) is independently communicated by a third party not bound by a confidentiality obligation, (iv) is independently developed by the receiving Party without use of the confidential information, or (v) must be disclosed pursuant to a legal obligation or a mandatory judicial or administrative decision, in which case the receiving Party shall inform the other Party without delay where the law so permits.

Obligations relating to personal data are governed primarily by Article 9bis (DPA) and the Privacy Policy, which prevail over this article in the event of conflict regarding the relevant personal data.