Privacy Policy

Information We Collect

• Account information: your name, email address, and login credentials when you register.
• Billing information: your subscription plan and payment history. We do not store your card number — payment credentials are tokenised and held by our payment processor, as described in our Billing, Payments & Refund Policy.
• Card content: the information you choose to put on your digital cards — such as names, job titles, photos, logos, contact details, links, vehicle details, and survey questions and responses.
• Usage information: how the Service is used, including card view counts and interaction analytics, and technical data such as browser type, device type, and approximate location derived from IP address.
• Communications: messages you send us, such as support requests and contact form submissions.

How We Use Your Information

• To provide, operate, and maintain the Service — including hosting and displaying the cards you publish.
• To process subscription payments and send billing-related notices.
• To send service communications such as account activation, renewal reminders, and important changes.
• To provide analytics to you about how your cards are viewed and used.
• To respond to support requests and improve the Service.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations.

We do not sell your personal information, and we do not use the content of your cards for advertising.

Your Cards Are Public

Digital cards are made to be shared. Any information you publish on a card is visible to anyone who has that card’s link or scans its QR code, and may be copied or saved by viewers (for example when someone saves your contact details to their phone). Only publish information on a card that you are comfortable making public. Information in your account that you do not put on a card is not made public.

Sharing With Third Parties

We share personal information only with:

• Service providers who help us run the Service — such as cloud hosting and storage, email delivery, and payment processing — under agreements that restrict their use of your information to providing those services.
• Authorities or other parties where required by law, for example in response to a lawful request, or to protect our rights, users, or the public.
• A successor business if we are involved in a merger, acquisition, or asset sale, in which case this policy will continue to apply to your information.

International Transfers

Our infrastructure and service providers may store or process information in countries other than your own, including outside South Africa. Where we transfer personal information across borders, we do so in accordance with POPIA, using providers that are subject to laws or agreements providing an adequate level of protection.

Data Retention

We keep your personal information for as long as your account is active and as needed to provide the Service. After your account is closed we delete or de-identify your information within a reasonable period, except where we must keep it longer for legal, accounting, or dispute-resolution purposes (for example, payment records).

Security

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, unauthorised access, and misuse — including encryption in transit, access controls, and secure cloud infrastructure. No system is perfectly secure; if we become aware of a data breach affecting your personal information, we will notify you and the Information Regulator as required by POPIA.

Cookies

We use cookies and similar technologies that are necessary for the Service to work — such as keeping you signed in — and to understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

Your Rights

Subject to applicable law (including POPIA and, where it applies, the GDPR), you have the right to:

• Access the personal information we hold about you.
• Ask us to correct or delete your personal information.
• Object to certain processing, or withdraw consent where processing is based on consent.
• Complain to the Information Regulator (South Africa) if you believe we have processed your information unlawfully.

To exercise any of these rights, email [email protected]. You can also update most account and card information yourself at any time from your account.

Children

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will give you reasonable advance notice by email or in-app notification. The “Last updated” date at the top shows when this policy was last revised.