Create My QR

Privacy Policy

Version 1.7 · Effective October 20, 2026

This Policy explains how MSP Target LLC, operator of MSP Target, collects, uses, discloses, and protects personal information. It applies to MSP Target websites, applications, workspaces, directories, integrations, communications, and support.

Information we collect

If you submit a public launch-notification request, we store your email address in encrypted form with a normalized hash, consent wording/version, timestamp, and source. It is used only for one launch notification. If you submit Ambassador interest, we store your name, company email, phone number, job title, intended MSP Target role, supplier or channel organization name and website, organization type, company size, headquarters, service areas, intended partner types, selected TSD or distribution portfolios, optional goals, and separate consent evidence so our team can review the request and contact you about participation. Neither submission creates an account, grants access, links you to an organization record, nor makes organization information authoritative. You may contact Support to withdraw either request.

If you create an account-less Networking QR, the creation and exchange screens explain which fields are required or optional, which details another person will receive, and how long the temporary record remains available. Contact details are released to another participant only through a deliberate exchange. Creating or scanning a QR does not subscribe either person to promotional communications. We record the applicable Terms and Privacy versions, acceptance source, and timestamp for account and QR creation.

How we use information

We use information to provide and secure accounts; create and operate Networking QR profiles and deliberate contact exchanges; isolate workspaces; process user-directed imports, exports, registrations, and communications; operate integrations; recommend possible suppliers and routes; maintain directories; calculate and reconcile commission and revenue records according to the inputs and provenance supplied; prevent duplicates, fraud, and unauthorized access; respond to support and privacy requests; administer subscriptions; measure service reliability and aggregate usage; and comply with law.

Workspace privacy and shared facts

Supplier facts intended for the shared catalog may be visible to other MSP Target users. Organization contacts, ratings, notes, opportunity history, credentials, and customer records remain workspace-private unless an authorized user deliberately publishes or sends them. Workspace owners and administrators can access their workspace’s records and control member access.

Optional Partner Discovery

Customer account creation through the public request form sends all submitted signup and request fields to admin@msptarget.com for review and support by authorized platform administrators only. This includes name, email, company, existing Partner company, business problem, requirements or current technology, timing, and budget, as disclosed before submission. The mailbox and any delegated or forwarded copies must remain restricted to platform administrators. Administrative review does not authorize disclosure to a supplier or Partner, unrelated marketing, or publication. Hosting and email delivery providers process the information to provide their services. Private request fields remain encrypted at rest in the application; an email copy is governed by the mailbox's security and retention controls rather than application workspace permissions.

Customers may save a private solution request with their business problem, requirements, timing, budget range, and existing Partner company. Private intake fields are encrypted at rest. Customers explicitly select a Partner and approve the named recipient and information before a structured request becomes a lead in that Partner’s private workspace. Supplier suggestions are directory research, not confirmed fit or authorization. No supplier receives the customer’s identity through this workflow. The customer sees a limited request status, not internal channel records. A separate, default-off “Let Customers find me as a Partner” setting lets eligible Partners display only their name and company to verified customers and receive deliberate requests. The existing Supplier/Channel discoverability setting does not opt a Partner into Customer discovery.

MSP and Trusted Advisor users may choose to make a limited business profile discoverable to verified Supplier and Channel Profile Managers. Discoverability is off by default and may be disabled at any time. Search results may show the user’s name, company, city, state or region, and professional role, but do not show an email address. A manager may send a limited, one-to-one introduction request. The user may accept, decline, or block it; MSP Target releases the user’s business email to that manager only after acceptance. MSP Target does not provide bulk directory exports.

How we disclose information

We disclose information only as needed to: provide services through vendors such as hosting, backup, email delivery, analytics, maps, security, payment, and support providers; complete user-directed HubSpot, supplier, TSD, or other integrations; communicate with recipients you select; comply with legal process; protect users and the Service; or complete a corporate transaction subject to appropriate protections. We do not sell personal information for money, share personal information for cross-context behavioral advertising, or use private customer records for targeted advertising.

Third-party sources and attribution

MSP Target may receive information from users, public business sources, supplier or TSD directories, MSP Trigger, HubSpot, referral links, and authorized profile managers. We preserve provenance where appropriate and label material estimates or suggestions as third-party or unverified. See the Third-Party Data & Integrations Policy.

Cookies and sessions

We use essential first-party cookies for authentication, session continuity, request security, preferences, and service operation. Browser controls may block these cookies, but essential features may then fail.

On selected public informational, event, invitation, and QR-creation pages, we use Plausible Analytics to measure aggregate page traffic, referral campaigns, and selected conversion actions such as starting beta registration or submitting the QR-creation form. Plausible does not set analytics cookies or use persistent cross-site identifiers. We do not load Plausible on QR exchange, verification, claim, contact, or authenticated workspace pages, and we do not send contact details, meeting notes, QR contents, or follow-up text to Plausible.

Retention

We retain account and workspace information while the account is active and for a limited period afterward to support export, security, legal, and recovery needs. An account-less Networking QR profile, its scans, and its temporary contact history are retained for up to 14 days after the last meaningful activity and then deleted unless the person creates or connects an account; the QR owner may delete the temporary information sooner. Unresolved account-less exchanges follow the same temporary retention window. Private-beta applicant records are retained for no longer than 12 months unless converted into an account, legally required, or deleted earlier. Commission and revenue records and their supporting documents remain workspace information and follow the account and workspace retention rules rather than the temporary QR window. Suppression records may be retained to honor opt-outs. Immutable security and delivery evidence may be retained without message secrets where necessary to prevent abuse and establish actions taken.

Security

We use reasonable safeguards including encrypted transport, encryption for sensitive stored credentials, access controls, workspace scoping, audit records, backups, and monitoring. No service can guarantee absolute security. Notify us promptly of suspected unauthorized access and never send passwords or API keys through support.

Your choices and privacy rights

Subject to applicable law, you may request access to or confirmation of personal information; correction; deletion; a portable copy; information about categories, sources, purposes, and disclosures; restriction or objection to certain processing; or appeal of a denied request where that right applies. We do not discriminate for exercising applicable privacy rights. Workspace owners may export available data and manage members and integrations. You may disable optional discoverability, disconnect supported integrations, delete a temporary QR, or opt out of promotional communications through the provided mechanism. Operational and security messages may still be necessary.

Submit a request through Support. We may verify your identity, account, workspace authority, and jurisdiction before responding. If an authorized agent submits a request, we may require evidence of authority and direct confirmation from the person concerned.

International use and children

MSP Target is a U.S.-operated business service. Information may be processed in the United States and other locations used by service providers. The Service is not directed to children under 18, and we do not knowingly collect their information.

Changes and contact

We may update this Policy and will post the updated date and provide notice when required. Submit privacy questions or requests through the support page.