Privacy Policy

Last updated: May 28, 2026

Qoro is operated by VyreLabs LLC ("VyreLabs," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use Qoro, including our website, dashboard, public storefront and checkout tools, early access forms, and related services.

Qoro is a business operations platform for makers and small businesses. Workspace owners and members may enter information about their business, products, recipes, inventory, orders, and customers. When a Qoro customer uses a public storefront or checkout, that customer's order information may also be processed through Qoro.

1. Information We Collect

We collect information you provide directly, information generated by your use of Qoro, and information processed through service providers that help us run the service.

  • Account and authentication information. We collect information such as your email address, password credentials handled through our authentication provider, session information, email verification status, password reset activity, and EULA acceptance records.
  • Organization and workspace information. We collect organization names, membership records, invite codes, user preferences, terminology settings, commerce settings, notification settings, and other configuration details you choose to save.
  • Business records. Qoro stores inventory, ingredient, recipe, product, production, order, fulfillment, payment, and shipping records that you or your organization enter into the service.
  • Customer and order information. Depending on your settings and use of Qoro, orders may include customer names, email addresses, phone numbers, shipping addresses, order notes, payment status, products purchased, and delivery or fulfillment information.
  • Product images and storefront content. If you upload product images or publish storefront product details, we process and store those files and related metadata.
  • Payment and commerce information. We process Stripe account identifiers, onboarding status, checkout session identifiers, payment link identifiers, payment intent metadata, cached card display fields when used for supported shipping features, and related status fields. We do not store full card numbers.
  • Early access and communications. If you request early access or contact us, we collect the information you submit, such as your email address, business description, and message content.
  • Device, log, and usage information. We may collect technical information such as IP address, browser type, request metadata, error logs, security events, and basic usage activity needed to operate, secure, troubleshoot, and improve Qoro.

2. How We Use Information

We use information for the following purposes:

  • Provide, maintain, secure, and troubleshoot Qoro.
  • Create and manage accounts, sessions, organizations, memberships, and preferences.
  • Store, display, update, and process business records entered into a workspace.
  • Support public storefronts, checkout flows, payment links, order notifications, and fulfillment workflows.
  • Process payments, account onboarding, platform fees, shipping-related charges, refunds, and payment status updates through service providers.
  • Send transactional emails such as verification, password reset, invite, and order notification emails.
  • Respond to support requests and communicate about service, security, legal, or administrative matters.
  • Detect, prevent, and investigate fraud, abuse, security incidents, or technical issues.
  • Comply with legal obligations and enforce our agreements.

3. How We Disclose Information

We do not sell personal information or share it for cross-context behavioral advertising. We disclose information only as needed to operate Qoro and support the uses described in this Policy.

  • Service providers. We use vendors for hosting, database, authentication, storage, payment processing, email delivery, font delivery, and related infrastructure. These providers process information on our behalf or as required to provide their services.
  • Payment and commerce providers. We disclose relevant transaction, checkout, account onboarding, and payment metadata to Stripe and connected payment services as needed to support paid checkout and payment links.
  • Shipping and fulfillment providers. If shipping label or fulfillment features are enabled, we may disclose ship-from, ship-to, package, carrier, rate, label, tracking, and related payment information to shipping carriers or label providers.
  • Workspace members. Information in a Qoro organization may be visible to authorized members of that organization according to the product's access controls.
  • Public storefront users. Product and storefront information you publish may be visible to people who access your public storefront or embedded checkout.
  • Legal and safety reasons. We may disclose information if we believe it is necessary to comply with law, protect rights and safety, investigate abuse, or enforce our agreements.
  • Business transfers. Information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

4. Cookies and Essential Browser Storage

Qoro currently uses essential cookies and browser storage to keep users signed in, remember preferences, support security, and operate the service. We do not currently use analytics or marketing cookies.

  • access_token. An HTTP-only authentication cookie used to keep you signed in. It is generally short-lived.
  • refresh_token. An HTTP-only session renewal cookie used to refresh your session. It is generally retained for up to 7 days.
  • theme. Local browser storage used to remember your light, dark, or system theme preference.
  • qoro-cookie-notice-v1. Local browser storage used to remember that you dismissed the essential cookie and storage notice.
  • pending-eula-acceptance. Local browser storage used during signup to record the EULA version that should be saved after email verification and sign-in.
  • maker-machine-client-instance-id. Session browser storage used to identify the active browser tab for real-time update behavior and duplicate-event handling.

Because this storage is currently necessary to provide the requested service, Qoro does not offer an opt-out for it. If we add optional analytics, advertising, or similar tracking technologies in the future, we will update this Policy and provide any required controls.

5. Retention

We retain information for as long as needed to provide Qoro, maintain business and security records, comply with legal obligations, resolve disputes, and enforce agreements. Workspace records generally remain until the organization deletes them, closes the account, or asks us to delete them, subject to backups, legal requirements, and legitimate business needs. Early access records are retained while we evaluate and communicate about access to Qoro.

6. Your Choices and Rights

You may update certain account, organization, product, order, and preference information in Qoro. You may also contact us to request access, correction, deletion, export, or restriction of your personal information. We may need to verify your identity and may retain information when required or permitted by law.

If your information was submitted to Qoro by one of our customers, such as through a public storefront order, please contact that business first. We will support them as appropriate in responding to privacy requests.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by unauthorized persons.

8. Children

Qoro is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Qoro, contact us and we will take appropriate steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice through Qoro or by other appropriate means. Your continued use of Qoro after an updated Policy becomes effective means the updated Policy applies to your use of the service.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact VyreLabs LLC at privacy@vyrelabs.com. For general support, contact support@vyrelabs.com.

© 2026 VyreLabs LLC. All rights reserved.