Terms of Service

QR Gate is software for managing entry to physical spaces. A visitor scans a QR code, verifies a phone number, and gets a door code, or a connected lock is asked to open. Your organization sets who gets in and when; QR Gate applies those rules and keeps the record.

These terms are an agreement between Mortise Systems LLC, a Texas limited liability company doing business as QR Gate ("QR Gate", "we"), and the person who holds an organization's account ("you"). Visitors use a door under the rules of the organization that runs it; how we handle their data is in the Privacy Policy.

QR Gate depends on phone networks, text delivery, the internet, your lock hardware and other companies' services, any of which can fail. It is not a life-safety, emergency-egress or security-critical system and must never be the only way into, or out of, a space.

• Always keep a physical key or another independent way to open every door.
• Exits must always work without QR Gate.
• QR Gate is built to fail safe: if a smart lock doesn't open, the visitor can still get the door's keypad code. You remain responsible for your building's access and safety compliance.
• QR Gate only decides who gets in from the outside. It never controls the way out: leaving must always work by hand, with no power and no QR Gate.

• Any lock, strike, relay or other hardware is installed by your organization, its electrician or a licensed installer — under the lock maker's instructions and the codes that apply to your building. QR Gate never sends anyone to install or wire a door.
• Your local fire marshal or building official decides which locks a door may use and how it must behave when power is lost or an alarm sounds. Follow their rules; QR Gate's guides are general information, not a substitute for them.

• Add people to member lists, event lists and staff rosters only when they have a relationship with your organization, and remove them when they ask.
• Use blocklists, trust codes, approvals and photo ID checks for legitimate access control, not for harassment or discrimination the law prohibits.
• Follow the laws that apply to your space and your use of visitor data, including any notice, signage or consent your area requires for entry records, waivers, staff location tracking or ID checks.
• You're responsible for the content of your waivers, welcome text and messages.
• Keep your account password, API keys and trust codes reasonably secure.
• If you add people to your team, they act for your organization: you're responsible for what they do with it, and for removing them when they leave. Removing someone ends their access at once.

For data about your visitors, members and staff, your organization decides what is collected and why, and QR Gate processes it on your behalf. That means we:

• use it only to run the features you turn on, keep the service secure, and meet legal duties;
• never sell it, never share it for advertising, and never use it to advertise to anyone;
• use only the companies listed in the Privacy Policy, and update that list when it changes;
• keep it as described in the retention schedule, and delete it when you delete your organization;
• help you answer requests from people to see or delete their data;
• tell you within 72 hours of learning of a breach affecting your organization's data.

These commitments are set out in full in our data processing addendum, which is part of these terms. If your organization needs a signed copy, print it from that page and email it to us.

Some data can be sensitive: attendance at a place of worship, or visits to a firearm range, for example. Choose the features you use with that in mind, and collect only what you need.

Two records are QR Gate's own and work across organizations: returning-visitor recognition (scoped to one kind of place) and photo ID check results, so a person isn't checked twice. They hold no full phone numbers.

• If your plan includes messages, you can text only people who opted in on your visitor page and confirmed by replying YES. You can't import or upload phone lists.
• Replies of STOP are honored automatically. You're responsible for what you send and for following texting laws; send only what your opt-in wording describes.
• We may pause an organization's messages to protect recipients or the service.

Photo ID checks are run by Stripe Identity. Each visitor is told about the check and chooses to start it; QR Gate keeps only the result. Each check is billed to the organization whose door asked, on its next invoice, at the price shown in the dashboard. See the Privacy Policy for what's collected.

Don't try to get into spaces you aren't authorized for, probe or disrupt the service, resell it without an agreement, or use it to collect data about people beyond what its features provide. We may suspend accounts that endanger people, other customers or the service.

• Paid plans bill monthly through Stripe at the price shown when you subscribe.
• Upgrades apply right away (prorated); downgrades take effect at the end of the billing period.
• Some things are billed by use on the same invoice: Seam-connected doors, photo ID checks, and messages beyond your plan's monthly allowance.
• The Free plan includes 50 text verifications a month. After that, a phone that needs a new text waits until the next month, while phones already remembered keep getting in. Paid plans never turn a visitor away over billing.
• A downgrade keeps what you already set up; it only stops you from adding more.

The service is provided "as is", without warranties of any kind, express or implied, including fitness for a particular purpose or uninterrupted availability.

To the fullest extent the law allows, QR Gate's total liability for any claim about the service is limited to what you paid us in the 12 months before the claim. We aren't liable for indirect, consequential or special damages, including losses from a door that did or didn't open.

You can delete your organization at any time from Settings. You have 7 days to undo it; after that, its data is deleted as described in the Privacy Policy, and your sign-in account remains until you ask us to delete it. We may end accounts that seriously breach these terms, with notice where practical.

QR Gate is offered to organizations in the United States. We don't offer it in the European Union or the United Kingdom.

We may update these terms. We'll email account holders about material changes, with a new effective date; using the service after that date means you accept them.

Questions: support@qrgate.app. Privacy requests: privacy@qrgate.app.