1. Information We Collect
We collect information to provide and improve our Service:
Account Information
- Email address (for account creation and communication)
- Name and profile information you choose to provide
- Hashed password (we never store plain-text passwords)
Card Content
- Information you put on your digital business card (name, title, company, bio, contact details, social links)
- Images, avatars, and background designs you upload
- Theme and customization preferences
Usage Data
- Card views and link clicks (aggregated analytics)
- Browser type and version
- Device information and operating system
- Pages visited and features used
- Referring URL and exit pages
2. How We Use Your Information
We use the collected information to:
- Create, maintain, and personalize your account and cards
- Provide, operate, and improve the Service
- Process payments and manage subscriptions
- Send service-related communications (e.g., payment receipts, updates)
- Generate anonymized analytics to improve the platform
- Detect, prevent, and address technical issues and abuse
- Comply with legal obligations
3. Data Sharing & Third Parties
We do not sell your personal information to third parties. We may share data with trusted service providers who help us operate the Service:
- Supabase — Database storage and authentication
- Vercel — Web hosting and deployment
- PayPal — Payment processing (we do not store payment details)
These providers are contractually bound to protect your data and use it only for the services we engage them for.
We may disclose your information if required by law, or to protect our rights, property, or safety.
4. Data Storage & Security
- Your data is stored securely on Supabase servers.
- Passwords are hashed using industry-standard bcrypt.
- All data transmission uses TLS/SSL encryption.
- We implement access controls and regular security reviews.
- Despite these measures, no method of electronic storage is 100% secure.
5. Cookies & Tracking
We use essential cookies for authentication and session management. We may use analytics cookies (via Vercel Analytics or similar) to understand usage patterns. You can control cookie settings through your browser preferences.
6. Data Retention
- We retain your account data for as long as your account is active.
- Upon account deletion, your data is permanently deleted within 30 days.
- Anonymized analytics data may be retained indefinitely.
- Payment records are retained as required by applicable financial regulations.
7. Your Rights & Choices
Depending on your jurisdiction, you may have the right to:
- Access — Request a copy of your personal data.
- Correction — Update inaccurate or incomplete data.
- Deletion — Request deletion of your data (subject to legal obligations).
- Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to certain processing activities.
To exercise these rights, contact us through the Support page in your dashboard.
8. International Data Transfers
Your data may be processed in countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.
9. Children's Privacy
The Service is not intended for individuals under the age of 13 (or 16 in the EU/UK). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. For material changes, we will notify you via email or through the Service.
11. Contact
For privacy-related inquiries, please contact us through the Support page in your dashboard or at the registered address in Macau SAR.