Privacy Notice

Data we collect

• Account data — email address, authentication identifiers and profile details you provide.
• Card images and extracted contact data — the photo you submit and the names, job titles, employers, phone numbers, emails, addresses and notes read from it. This may include personal data about the third party whose card you scanned.
• Subscription data — plan, status, renewal dates and the identifiers our payment provider gives us. We never see or store your card details.
• Technical data — IP address, device and browser information, and error or usage logs.

Why we use it, and our legal basis

• Creating and running your account, scanning cards and generating vCards — performance of our contract with you.
• Granting free access to approved company email domains — performance of our contract and our legitimate interest in serving business customers.
• Security, abuse and fraud prevention — legitimate interests.
• Fixing bugs and improving the product — legitimate interests.
• Customer support — performance of our contract.
• Meeting tax, accounting and legal obligations — legal obligation.

Card images are processed to produce the extracted fields and are not used to train third-party models. When you scan a card belonging to someone else, you are responsible for having a lawful basis to process their details.

Who we share it with

• Paddle.com — our Merchant of Record, for the sale, subscription management, payments, tax compliance and invoicing.
• Hosting, database and AI processing providers — acting as processors on our instructions to run the app and perform the card extraction.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are required by law.

Some providers are located outside the UK/EEA. Where data is transferred internationally we rely on adequacy decisions or Standard Contractual Clauses.

Retention

Account and subscription records are kept for as long as your account is active and for as long afterwards as tax and accounting law requires. Uploaded card images are processed for the scan and are not retained as a permanent library; extracted contact data lives in the vCard you download to your own device. Logs are kept for a short period for security and debugging, then deleted or anonymised.

Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you may withdraw consent where we relied on it. You can also complain to your local data protection authority. We respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security so you can only reach your own records.

Cookies

We use essential cookies and local storage only — to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear them in your browser, but sign-in will stop working.

Contact

For privacy questions, contact BC Snap through the support channel shown at checkout. Billing-related requests are handled by Paddle at paddle.net.