Privacy notice

1. Who is responsible

testCard is operated by [name of the person or company that operates the service]. For any question or request about your data, write to [privacy contact email].

This notice explains what data we keep, what for, who we share it with and how you can control it.

2. What data we keep

• Your account: your email address, your name if you add one, and the language you chose. You sign in with a link sent to your email, so we don't store passwords.
• Your contacts: whatever you scan or type about each person: name, job title, company, phone numbers, emails, website, address, social media, notes, tags and where you met.
• Card photos: the images you take when scanning (front and, if you do it, back).
• Follow-ups and templates: the reminders you schedule and the message templates you create.
• Your digital card: the details you choose to publish, the photo or logo if you upload one, and a visit counter. We don't identify who visits it.
• Technical data: the IP address and browser associated with your session, for security, and metrics about each scan (model used, time and size of the request, how many fields you corrected), without the contents of the card.

We only use the cookies needed to keep you signed in and remember your language. We don't use advertising or tracking cookies.

The photo of your digital card is stored without the image's metadata (location, camera model, date).

3. Other people's data

The people whose cards you save are not users of this service. You decide what data about them you keep and you are responsible for having a legitimate reason to do so, for example, that they gave you their card so you could contact them.

testCard acts as a provider that stores that data on your behalf and doesn't use it for anything else. If a person asks us to delete their data, we will refer them to whoever saved it or delete it if we can identify them.

4. What we use the data for

• To provide the service: read cards, save and search contacts, show your digital card and send you the sign-in link and the follow-up reminders you scheduled.
• To keep things secure and prevent abuse, for example with usage limits.
• To measure the quality of card reading and the cost of the service.

We don't sell your data or use it for advertising.

5. Who we share it with

To work, we use providers that process data for us:

• Anthropic (Claude API): receives the card photo to read the text and return the fields. The image is sent only when you scan.
• SMTP2GO: sends the service's emails (sign-in link and follow-up reminders). It receives your email address and the text of the message.
• Hosting provider: [name of the server provider], where the application, the database and the photos live.
• Google: only if you later sign in with your Google account.
• Payment processor: when paid plans exist, a processor such as Stripe will receive the billing details. We don't store card numbers.

Some of these providers are in other countries, including the United States. We only share what is necessary with each one and we don't authorize them to use your data for their own purposes beyond providing us their service. [Review each provider's terms with legal counsel.]

6. How long we keep it

• Your contacts, photos and digital card, for as long as you have an account.
• When you delete a contact, its data and the photos of its card are deleted.
• Photos from scans you didn't save as a contact are deleted automatically after 7 days.
• The photo of your digital card is deleted when you remove it or when you delete your account.
• When you delete your account, your account, contacts, photos, tags, templates, follow-ups and digital card are deleted.
• We keep, without personal data, the record of how many scans you made and their cost, to enforce plan limits and for accounting.
• Backups, when they exist, are kept for up to [number] days before being deleted.

7. Your rights and how to exercise them

• See and take your data: export your contacts as CSV or vCard from the app.
• Correct it: edit any contact or your card.
• Delete it: delete contacts one by one or delete your whole account from the app.
• Any other request (access, objection, restriction): write to [privacy contact email].

[Add the specific rights and response times that apply under the applicable laws (for example, the data protection laws of the country or state where the service operates and where your users live).]

8. Security

Connections use HTTPS, card photos are private and only the account that uploaded them can see them, and access is through a single-use link that expires after 15 minutes. No system is completely secure; if we detect an incident that affects you, we will notify you as the law requires.

9. Minors

testCard is not aimed at people under 18 and we don't knowingly collect data from minors.

10. Changes to this notice

If we change this notice, we will publish the new version here with its date. If the change is important, we will let you know by email.