Privacy Policy
Last updated: January 2025
1. Information We Collect
We collect information you provide directly: name, email address, password hash, job title, organisation name, billing information (via Stripe), and any content you add to your digital business cards.
We also collect usage data such as card views, device type, and referrer information to provide analytics.
2. How We Use Your Information
We use your information to: provide and maintain the Service; process payments; send transactional emails (verification, password reset); provide analytics; and improve our Service.
3. Data Sharing
We do not sell your personal data. We share data only with: service providers (Stripe for payments, Resend for email, our cloud hosting provider), when required by law, and with your consent.
4. Cookies
We use cookies for authentication (JWT stored in httpOnly cookies). You can disable cookies in your browser, but some features may not work properly.
5. Data Retention
We retain your account data for as long as your account is active. You can request deletion of your account at any time. We may retain anonymised, aggregated data for analytics purposes indefinitely.
6. Security
We use industry-standard encryption (TLS/HTTPS), bcrypt password hashing, and regular security reviews to protect your data. No system is 100% secure; we encourage strong passwords and good security practices.
7. Your Rights (GDPR / CCPA)
Depending on your jurisdiction, you may have rights to: access, correct, or delete your personal data; object to processing; export your data; and withdraw consent. Contact us at privacy@vcard.io to exercise any of these rights.
8. Children's Privacy
VCARD is not intended for users under 16. We do not knowingly collect data from minors. If we discover such collection, we will delete the data promptly.
9. Changes to This Policy
We may update this Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service.
10. Contact
Questions about this Privacy Policy? Contact our Data Protection Officer at privacy@vcard.io