Privacy Policy

Last updated: September 19, 2026

This Privacy Policy describes how Visiting Card CRM ("we", "us", or "our") collects, uses, and shares your personal information when you use our mobile application and web application (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect several types of information to provide and improve our service:

Data Type	What We Collect	Purpose
Account Information	Name, email address, and profile photo from your Google or Supabase sign-in	To create and manage your account
Contact Data	Names, phone numbers, mobile numbers, email addresses, WhatsApp numbers, companies, designations, physical addresses, websites, notes, and tags that you enter manually or extract using our OCR features	To provide contact management — the core functionality of the app
Business Card Images	Photos of business cards or screenshots that you upload for text extraction	To perform Optical Character Recognition (OCR) and extract contact details
Activity Data	Logs of calls made, WhatsApp messages opened, follow-up notes created, and reminders set within the app	To provide relationship history, follow-up tracking, and reminder features
User IDs	Your user account identifier generated by Supabase	To identify your data and enforce security policies
App Interactions	Actions you take inside the app (creating contacts, opening the scanner, exporting data)	To provide the features you request

What We Do Not Collect

• We do not collect your device's GPS or location data
• We do not read your SMS messages
• We do not access your system call log
• We do not read your system calendar
• We do not collect financial or payment information
• We do not collect health or fitness data

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Extract contact information from business card photos using OCR
• Store and organize your contacts, collections, notes, and reminders
• Enable you to call, message via WhatsApp, or email contacts
• Sync your contacts with Google Contacts when you choose to do so
• Export your contacts to Excel or Google Sheets when you request it
• Improve, personalize, and expand the Service
• Communicate with you for customer support
• Find and prevent fraud or abuse
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may process your data. Each is bound by its own privacy policy and processes data only as needed to deliver the Service:

Service	What It Processes	Privacy Policy
Supabase	Authentication, database storage, and file storage. Your account and contact data are stored on Supabase servers.	supabase.com/privacy
Google Cloud Vision API	Business card and screenshot images are sent to Google for Optical Character Recognition (text extraction).	Google Cloud DPA
Google Gemini API	The OCR-extracted text (not the image) is sent to Google Gemini to structure it into contact fields.	Gemini API Terms
Google Contacts (People API)	When you enable sync, we read from and write to your Google Contacts. This is entirely user-initiated and can be revoked at any time.	Google Privacy Policy
Google Sheets API	When you choose to export contacts to Google Sheets, the contact data you select is transmitted to Google and stored in a spreadsheet in your Google Drive account. This is entirely user-initiated and can be revoked at any time.	Google Privacy Policy

4. Data Retention

We retain your personal information for as long as your account is active. When you delete your account:

• All your contacts, collections, notes, activities, and reminders are permanently deleted from our servers
• All business card images stored in our servers are permanently deleted
• Your account credentials are permanently deleted
• The deletion is immediate and irreversible

Contacts that have been synced to your Google Contacts account are not affected by account deletion. Those are managed by Google and remain in your Google account.

5. How to Delete Your Data

You have two ways to delete your account and all associated data:

Option 1 — In-App (Fastest)

1. Open Visiting Card CRM
2. Tap More in the bottom navigation
3. Tap Delete account
4. Confirm in the dialog

Option 2 — Web Request

If you no longer have the app installed, visit our Account Deletion Page or email us at sayedurr607@gmail.com with the subject line "Account Deletion Request."

6. Data Security

The security of your data is important to us. We use the following safeguards:

• Encryption in transit: All data transmitted between the app and our servers uses HTTPS/TLS
• Encryption at rest: Data stored on Supabase servers is encrypted at rest
• Row Level Security (RLS): Every database table enforces that users can only access their own data
• Private storage: Business card images are stored in a private bucket accessible only to the owner
• Signed authentication: All API requests require a verified session token

However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Your Data Rights

Depending on where you live, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request corrections to inaccurate data
• Deletion: Request deletion of your data (see Section 5)
• Portability: Export your data using the built-in export features (Excel / Google Sheets)
• Withdraw consent: Revoke Google Contacts access at any time from your Google Account settings

To exercise any of these rights, contact us at sayedurr607@gmail.com or call +91 7010023283.

For California Residents (CCPA)

You have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" of personal information. We do not sell personal information.

For European Users (GDPR)

You have additional rights including data portability and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is your consent and the performance of our contract with you.

8. Children's Privacy

Our Service is not directed to anyone under the age of 13 (or 16 in the European Union). We do not knowingly collect personally identifiable information from children. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

9. International Data Transfers

Your data may be transferred to and maintained on servers located outside your country of residence. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place through our providers' compliance with standard contractual clauses and applicable data protection frameworks.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us