QRIER personal data processing policy
Last updated: Oct. 18, 2026
This policy explains what personal data QRIER processes when you visit qrier.co or use a QRIER portal, what it is used for, who it is shared with, and how to exercise your rights. It is QRIER's data processing policy under Colombia's Law 1581 of 2012 and Decree 1377 of 2013, compiled in Decree 1074 of 2015.
1. Scope
This policy covers qrier.co and QRIER's portals for operator staff, agencies, and end customers, plus public tracking. It does not cover third-party sites linked from qrier.co, which have their own policies.
2. Data controller
Qrier LLC ("QRIER"), a Delaware limited liability company registered to do business in Florida, United States, with its address at 3250 NE 1st Ave, Miami, FL 33137, USA. Phone: +1 786-941-7759. Email: privacy@qrier.co. QRIER is the controller (responsable) for qrier.co visitor and prospect data, and the processor (encargado) for the data each operator uploads to the platform. Each operator is the controller for the data it uploads, including its end customers' data.
3. Data we process
On qrier.co, if you fill out the contact form: name, company, email, phone, operation type, volume, routes, tools, and message, plus your landing page, referring site, and campaign (UTM) parameters, and the record of your authorization (section 5). Our hosting provider logs technical request data such as IP and browser. Platform users: name, email, phone, role, Microsoft Entra sign-in identifier, session and change history, time-clock punches (with the punch IP), and data the operator uploads: shipments, manifests, end customers, proof of delivery (the recipient's name and ID number, relationship to the consignee, signature, photos, and location), email, and chat. We also keep support access records (IP and browser). Your password is handled by Microsoft Entra; QRIER does not store it.
4. Purposes
We use qrier.co data to respond to your request and to see how you found the site (landing page, referring site, and campaign). We also use it to send you commercial information by email or contact you on WhatsApp, but only if you authorize this in the form's optional checkboxes. We use platform data to provide the service to the operator, including platform support and security.
5. Authorization
To send the qrier.co contact form, you must check the authorization box, which starts unchecked. The box to receive commercial information by email and the box to let us contact you on WhatsApp are optional and separate from the authorization: you can send the form without checking them. With each request we store the record of your authorization: date and time, the version of this policy, the text you accepted, and the language, plus your answers to the optional boxes. You can revoke any of these authorizations by writing to privacy@qrier.co. In an operator's portal, the operator is the controller and is responsible for obtaining authorization from the people whose data it processes.
6. Cookies and analytics
On qrier.co, we use no analytics tools. We only use first-party cookies: session (30 days), language, theme, sidebar, and your last sign-in portal (1 year), plus short-lived technical cookies during sign-in and support sessions. Your browser also stores where your visit came from (that tab only) and portal preferences, and on warehouse devices, an offline scan queue. We use no third-party or advertising cookies.
7. Who we share data with
We share personal data only with the providers needed to run the service: Microsoft Azure (servers, database, files, and optical character recognition, in Brazil), Vercel (site and portals), Microsoft Entra (sign-in), Resend (email), Cloudflare (receiving and forwarding the email you send to @qrier.co addresses), and the platform's mail server, for alerts and the email inbox. If you authorize us to contact you on WhatsApp, we use WhatsApp (Meta) for that contact. If your operator turns them on, also: WhatsApp (Meta), Anthropic, Bold, UPS, Mapbox, 17TRACK (carrier tracking: it receives only the carrier's tracking number and which carrier it is), and Sent (shipment status messages by SMS or WhatsApp: it receives the recipient's name and phone number, the tracking number, the status, and the tracking link). We do not sell personal data.
8. International transfers
Our servers and database are on Microsoft Azure (Brazil). The site and portals run on Vercel, and we use US-based providers such as Vercel, Resend, Microsoft, Cloudflare, and Meta (WhatsApp). Your data may be processed in Brazil and the United States. If your operator turns on carrier tracking, the carrier's tracking number is also processed by 17TRACK, which is based in China. If your operator turns on SMS or WhatsApp status messages, the recipient's name and phone number are also processed by Sent, in the United States. By checking the authorization box on the contact form, you authorize the transfer of your data to providers in Brazil and the United States.
9. How long we keep data
Form data: we keep it until you ask us to delete it; we delete it manually on request. Operator data: for the life of the contract; afterward we hand over a copy and delete it from the live database. Backups are erased when their retention cycle ends. Audit logs: kept while the operator's account is active.
10. Security
We protect data with these measures: Encryption in transit (HTTPS/TLS) between your browser, our servers, and the database. Encryption at rest for the database and files (Azure), plus AES-256-encrypted session tokens. Role-based access control: 15 staff roles, per-module permissions, and separate portals for agencies and customers. Logical separation of each operator's data.
11. Your rights
As a data subject, under Article 8 of Law 1581 of 2012, you can know, update, and correct your data; ask for proof of your authorization; learn how we use it; revoke your authorization or ask us to delete your data; access it free of charge; and file a complaint with Colombia's Superintendence of Industry and Commerce (SIC) after first submitting your request to us. Deletion and revocation do not apply when you have a legal or contractual duty to remain in the database. If you use an operator's portal, that operator is directly responsible for your operational data.
12. How to exercise your rights
Area responsible for requests: QRIER Privacy, privacy@qrier.co. Requests may be filed by the data subject, their heirs, or their representative or attorney-in-fact, with proof of identity or standing. An inquiry is for learning what data we hold about you; a complaint is for correcting, updating, or deleting it, revoking your authorization, or reporting a possible violation of data protection law. Write to privacy@qrier.co with your name, how to reach you, and what you are asking for; for a complaint, describe the facts and attach any documents you want us to consider. If a complaint is missing information, we will ask you for it within 5 days of receiving the complaint; if 2 months pass after that request and we haven't received it, the complaint is considered withdrawn. We answer inquiries within 10 business days (extendable by 5) and complaints within 15 business days (extendable by 8). If we need the extension, we will tell you before the deadline, with the reason and the new date.
13. Changes to this policy
If we change this policy, we publish the new version on this page with its date. If the change is substantial, for example to the purposes or to the controller's identification, we will tell you before it takes effect, by email or with a notice on qrier.co. If the purposes change, we will ask for a new authorization.
14. Effective date and validity
This policy is effective from Oct. 17, 2026. Databases are kept while the purpose they were collected for lasts, under the retention periods in this policy.
Have a question about how QRIER handles your data? Write to us at privacy@qrier.co.