MycoQR

Privacy Policy

Last updated: November 30, 2025

At MycoQR, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mushroom cultivation tracking platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect information necessary to provide our services:

  • Email address
  • Name (optional)
  • Organization name
  • Profile picture (if provided via authentication provider)

1.2 Cultivation Data

As you use MycoQR, we store the data you enter about your cultivation operations:

  • Item records (batches, cultures, substrate blocks, etc.)
  • Environmental measurements (temperature, humidity, weight, pH)
  • Stage transitions and timeline data
  • Notes and observations
  • Strain and substrate information
  • Location and grow room configurations
  • Contamination records
  • Harvest and yield data

1.3 Sales and Customer Data

If you use our invoicing and sales features:

  • Customer names and contact information you enter
  • Transaction records and invoice details
  • Payment status and history

Note: Payment card details are processed directly by Stripe and are never stored on MycoQR servers. See Section 3 for details on third-party services.

1.4 Usage Data

We automatically collect certain information about how you use the Service:

  • Device information (browser type, operating system)
  • IP address and general location
  • Feature usage patterns
  • Error logs and performance data

2. How We Use Your Information

We use your information to:

  • Provide and maintain the MycoQR service
  • Process your cultivation tracking and management requests
  • Generate analytics and insights from your data (visible only to you)
  • Send service notifications and updates
  • Respond to your support requests
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. Third-Party Services

MycoQR integrates with trusted third-party services to provide our platform. Each service has its own privacy practices:

3.1 Clerk (Authentication)

We use Clerk for user authentication and account management. Clerk processes your login credentials and authentication data according to their privacy policy.

3.2 Convex (Database)

Your cultivation data is stored securely in Convex, our cloud database provider. Data is encrypted at rest and in transit. Convex is SOC 2 Type II certified.

3.3 Stripe (Payment Processing)

If you use our payment features, transactions are processed through Stripe. Stripe handles all payment card information directly. MycoQR stores only transaction records (amounts, dates, status) but never card numbers or sensitive payment details.

3.4 Crisp (Customer Support)

We may use Crisp for live chat support. Chat conversations and related information are processed according to Crisp's privacy policy.

4. Data Storage and Security

4.1 Storage Location

Your data is stored securely in Convex, our cloud database provider. Convex provides:

  • Encryption at rest and in transit (TLS)
  • SOC 2 Type II certification
  • Regular security audits and monitoring
  • Access controls and authentication requirements
  • Automated backups

4.2 Data Isolation

Your cultivation data is logically isolated from other users. Organization-based access controls ensure that only authorized team members can view your data.

5. Data Retention

We retain your data as follows:

  • Active accounts: Data is retained for as long as your account is active.
  • Archived items: Archived cultivation items are retained indefinitely unless you request deletion.
  • Deleted accounts: Upon account deletion, we will delete your personal data within 30 days. Some data may be retained longer for legal compliance or to resolve disputes.
  • Transaction records: Payment records may be retained for up to 7 years for tax and legal compliance.

6. Your Rights and Choices

You have the following rights regarding your data:

6.1 Access and Export

You can access all your cultivation data through the MycoQR dashboard. Contact us to request a complete export of your data in a portable format.

6.2 Correction

You can update or correct your account information and cultivation records at any time through the Service.

6.3 Deletion

You can delete individual items, or request complete account deletion by contacting support. Note that some data may be retained as required by law or for legitimate business purposes.

6.4 Data Portability

Upon request, we will provide your data in a commonly used, machine-readable format.

7. Cookies and Tracking

7.1 Essential Cookies

We use essential cookies to maintain your session and provide core functionality. These cannot be disabled while using the Service.

7.2 Analytics

We may use analytics tools to understand how users interact with our Service. This helps us improve the user experience. Analytics data is aggregated and does not identify individuals.

8. Data Sharing

We do not sell your personal data or cultivation information.

We may share data only in the following circumstances:

  • With your consent: When you explicitly authorize sharing.
  • Service providers: With third-party services necessary to operate MycoQR (as described in Section 3), under strict confidentiality agreements.
  • Legal requirements: When required by law, court order, or government request.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to users.
  • Safety: To protect the rights, safety, or property of MycoQR, our users, or the public.

9. Children's Privacy

MycoQR is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Last updated" date
  • Sending an email notification for significant changes
  • Displaying an in-app notice

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

By using MycoQR, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.