PRIVACY POLICY

KHETqr Beta Platform

Last Updated: January 20, 2026

KHETqr is currently operating as a pilot technology platform under development (“Beta Platform”). We respect your privacy and are committed to handling personal information responsibly and transparently.

1. Information We Collect

Personal Information

• Full name

• Email address

• Phone number

• Company name (if provided)

• Account login credentials

Usage Data

• Login and activity logs

• Device and browser information

• Basic analytics data

• Cookies and similar tracking technologies

2. Purpose of Data Processing

We collect and use information for the following purposes:

Service Operation

• Creating and managing user accounts

• Providing QR code generation and product registration features

• Responding to support inquiries

• Maintaining and improving system functionality

Platform Improvement

• Monitoring performance and stability

• Testing and developing new features

• Analyzing usage patterns to improve user experience

Legal and Security Purposes

• Preventing fraud or misuse

• Protecting platform integrity

• Responding to lawful requests from authorities when required

3. Information Sharing

KHETqr does not sell or rent personal information.

Information may be shared only in the following cases:

• With service providers assisting in hosting or system operation

• When required by applicable law or competent authorities

• To protect the rights, safety, or security of users or the platform

4. Data Security

We implement reasonable technical and organizational measures to protect data, including:

• Encrypted connections (HTTPS)

• Access control restrictions

• Regular system monitoring

• Periodic backups

However, no internet-based system can guarantee absolute security. By using the platform, you acknowledge that data transmission carries inherent risks.

5. Your Rights

You may request to:

• Access your personal data

• Correct inaccurate information

• Delete your account

• Withdraw consent where applicable

To exercise your rights, contact:

📧 contact@khetqr.com

We will respond within a reasonable timeframe.

6. Cookies

We use cookies to:

• Ensure basic website functionality

• Store user preferences

• Analyze basic usage statistics

You may disable cookies through your browser settings, though this may affect certain features.

7. Data Retention

• Account data: retained until account deletion

• System logs: up to 12 months

• Product registration data: retained as long as the account remains active

Data may be deleted upon request, unless retention is required for security or legal purposes.

8. Beta Status Notice

KHETqr is currently in a testing and development phase. Data processing practices may evolve as the platform develops. Continued use of the platform indicates acceptance of this Privacy Policy.

9. Contact

For privacy-related inquiries:

📧 Email: contact@khetqr.com

🌐 Website: khetqr.com

ACCEPTABLE USE POLICY (AUP)

Last Updated: January 20, 2026

This Acceptable Use Policy (“AUP”) governs the use of the KHETqr platform and applies to all users accessing or using the Services.

By using KHETqr, you agree to comply with this AUP.

1. Purpose of This Policy

KHETqr is a technology platform designed to generate QR codes and host product-related information.

This AUP establishes acceptable standards of conduct to:

• Protect the integrity of the platform

• Prevent fraud and misuse

• Reduce risks related to counterfeit goods

• Ensure lawful and ethical use

2. Lawful Use Requirement

Users may only use KHETqr for lawful purposes.

You agree not to use the platform in any way that violates:

• Applicable local or international laws

• Intellectual property laws

• Consumer protection regulations

• Anti-fraud regulations

• Data protection laws

You are solely responsible for ensuring that your use complies with applicable laws in your jurisdiction.

3. Prohibited Activities

The following activities are strictly prohibited:

3.1 Product and Business Misrepresentation

• Registering counterfeit goods

• Falsely claiming brand ownership

• Misrepresenting product origin

• Uploading misleading or deceptive information

• Using QR codes to simulate official certification

3.2 Intellectual Property Violations

• Using trademarks without authorization

• Uploading copyrighted content without rights

• Impersonating legitimate brands

• Creating fake brand verification pages

3.3 Fraud and Deceptive Practices

• Using QR codes for phishing

• Linking QR codes to scam websites

• Manipulating product tracking data

• Engaging in financial or commercial fraud

3.4 Technical Abuse

• Attempting to hack or disrupt the platform

• Reverse engineering the system

• Exploiting vulnerabilities

• Automated abuse (bots, scraping, data harvesting)

• Attempting unauthorized access to other accounts

3.5 Harmful or Illegal Content

Users may not upload or distribute content that:

• Promotes illegal activity

• Contains malware

• Is defamatory or fraudulent

• Violates public order or safety

4. Platform Monitoring and Enforcement

KHETqr reserves the right to:

• Monitor platform usage

• Review submitted content

• Investigate suspicious activity

• Suspend or terminate accounts

• Remove QR codes or hosted information

Enforcement may occur without prior notice if necessary to protect the platform or third parties.

5. Immediate Suspension for High-Risk Violations

Accounts may be immediately suspended without warning if there is reasonable suspicion of:

• Counterfeit goods

• Brand impersonation

• Fraudulent activity

• Serious legal violations

KHETqr is not obligated to provide advance notice in cases involving platform security or consumer protection risks.

6. Reporting Violations

Third parties, brand owners, or users may report suspected violations by contacting:

contact@khetqr.com

KHETqr may request supporting documentation when reviewing complaints.

7. No Liability for User Violations

Users acknowledge that:

• They are solely responsible for all content they submit

• KHETqr does not pre-approve or certify products

• Violations of this AUP may result in legal consequences

KHETqr shall not be liable for damages resulting from user misconduct.

8. Relationship with Terms

This AUP forms part of the Terms and Conditions of Service.

Violation of this AUP constitutes a breach of the Terms and may result in:

• Account suspension

• Permanent termination

• Removal of content

• Legal action where appropriate

LEGAL DISCLAIMER

Last Updated: January 20, 2026

This Legal Disclaimer applies to the use of the KHETqr platform and all QR codes generated through the platform.

By accessing or using KHETqr, you acknowledge and agree to the terms set out below.

1. Technology Platform Only

KHETqr operates solely as a technology platform that enables users to generate QR codes and host product-related information.

KHETqr is not:

1. A manufacturer
2. A distributor
3. A seller
4. A certifying authority
5. A government body
6. A product authentication agency

KHETqr does not produce, inspect, store, or ship any physical goods.

2. No Product Verification or Certification

All product information accessible via KHETqr QR codes is provided directly by the product owner or registered user.

KHETqr does not independently verify:

1. Product authenticity
2. Ownership rights
3. Manufacturing origin
4. Distribution authorization
5. Legal compliance
6. Intellectual property status

Any review performed by KHETqr is conducted on a best-effort basis and does not constitute certification, endorsement, or legal validation.

3. Accuracy of Information

KHETqr does not guarantee that information displayed through QR codes is:

1. Accurate
2. Complete
3. Current
4. Lawful
5. Free from error

Users and consumers should independently verify product information before relying on it.

4. No Endorsement

The presence of a product, business name, or brand on the KHETqr platform does not imply:

1. Endorsement
2. Approval
3. Partnership
4. Affiliation

KHETqr remains a neutral intermediary.

5. Limitation of Responsibility

To the maximum extent permitted by applicable law, KHETqr shall not be liable for:

1. Counterfeit goods
2. False declarations
3. Misleading product information
4. Regulatory violations
5. Intellectual property disputes
6. Consumer complaints relating to product quality

All legal responsibility related to products registered on the platform rests solely with the registering User.

6. Use at Your Own Risk

All services are provided on an “as-is” and “as-available” basis.

KHETqr makes no warranties, express or implied, including but not limited to:

1. Merchantability
2. Fitness for a particular purpose
3. Non-infringement
4. Continuous or uninterrupted service

Use of the platform and reliance on QR-displayed information is at your own risk.

7. External Links and Third-Party Content

QR codes may link to external websites or third-party content.

KHETqr does not control or assume responsibility for:

1. External website content
2. Third-party services
3. External data processing
4. Security practices of linked platforms

Access to external content is at the user’s own discretion.

8. International Users

Users accessing KHETqr from outside Vietnam are responsible for compliance with local laws and regulations.

KHETqr does not represent that the platform complies with all laws in every jurisdiction.

9. Updates

KHETqr may update this Disclaimer at any time.

Continued use of the platform constitutes acceptance of the updated Disclaimer.

DATA PROCESSING AGREEMENT (DPA)

Last Updated: January 20, 2026

This Data Processing Agreement (“DPA”) forms part of the Terms and Conditions between:

KHETqr Platform (the “Processor”)

and

The User or business customer using the Services (the “Controller”).

This DPA applies where the Controller is subject to Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”) and provides Personal Data to KHETqr for processing.

1. Roles of the Parties

For the purposes of this DPA:

1. The Controller determines the purposes and means of processing Personal Data.
2. KHETqr acts solely as a Data Processor, processing Personal Data only on behalf of the Controller.

KHETqr does not determine the purposes of data processing and does not act as a joint controller unless explicitly agreed in writing.

2. Subject Matter and Duration

This DPA applies to Personal Data processed by KHETqr in connection with the Services.

Processing shall continue for the duration of the service relationship unless otherwise required by law.

Upon termination of Services, data shall be deleted or returned in accordance with Section 8 of this DPA.

3. Nature and Purpose of Processing

KHETqr may process Personal Data for the following purposes:

• Hosting product-related information

• Displaying QR-linked content

• Maintaining user accounts

• Providing technical support

• Ensuring system security

The types of Personal Data may include:

• Names

• Email addresses

• Business contact information

• Product-related metadata

• Technical usage data

KHETqr does not intentionally collect special categories of data (as defined under GDPR).

4. Processor Obligations

KHETqr agrees to:

• Process Personal Data only on documented instructions from the Controller

• Ensure persons authorized to process data are bound by confidentiality

• Implement appropriate technical and organizational security measures

• Not sell Personal Data

• Notify the Controller without undue delay after becoming aware of a Personal Data breach

KHETqr shall not use Personal Data for its own marketing or independent purposes.

5. Sub-Processors

KHETqr may use third-party service providers (sub-processors), such as:

• Cloud hosting providers

• Infrastructure services

• Analytics providers

KHETqr shall:

• Select sub-processors with reasonable care

• Ensure they are bound by appropriate data protection obligations

• Remain responsible for their compliance

A list of sub-processors may be provided upon reasonable request.

6. International Data Transfers

Personal Data may be processed in Vietnam or other countries where KHETqr or its service providers operate.

Where Personal Data originating from the EU is transferred outside the EU/EEA, KHETqr shall implement appropriate safeguards as required under GDPR, which may include:

• Standard Contractual Clauses (SCCs) where applicable

• Contractual data protection commitments

7. Assistance to the Controller

Taking into account the nature of processing, KHETqr shall provide reasonable assistance to the Controller in fulfilling obligations related to:

• Data subject access requests

• Rectification or deletion requests

• Restriction or objection to processing

• Data portability (where technically feasible)

• GDPR compliance assessments

8. Data Retention and Deletion

Upon termination of Services, KHETqr shall:

• Delete Personal Data within a reasonable period; or

• Return the data to the Controller upon request

Unless retention is required by applicable law.

Backup copies may remain temporarily in secure archives before automatic deletion.

9. Security Measures

KHETqr implements reasonable technical and organizational measures, which may include:

• Encryption in transit

• Access controls

• Authentication safeguards

• Server-level security protections

• Monitoring for unauthorized access

While KHETqr takes appropriate security measures, no system can guarantee absolute security.

10. Liability

Liability under this DPA shall be subject to the limitations set out in the Terms and Conditions.

The Controller acknowledges that KHETqr acts only as a Processor and shall not be liable for:

• The legality of data collection by the Controller

• Instructions provided by the Controller

• The accuracy of data supplied by the Controller

11. Governing Law

This DPA shall be governed by the laws specified in the Terms and Conditions, unless mandatory GDPR provisions require otherwise.