vCard privacy policy

How vCard collects, uses and protects your personal information. We never sell your data or use it for commercial purposes.

The current version of this policy, with its full change history and earlier versions, is always at vcard.webtrickssoftware.com/privacy-policy. If the two ever differ, that version applies.

vCard (“the Service”) is a product of Webtricks Software Pvt. Ltd. (“we”, “us”), listed at www.webtrickssoftware.com. This policy explains what personal information we collect when you use our website and our Android and iOS apps, why we collect it, and the choices you have.

Our promise: we store your personal details only to run the Service for you. We do not use your data for any commercial purpose — we do not sell, rent, trade, license or share it with any third party, and we do not use it for advertising or marketing.

1. Information we collect

Account details — your name, email address, and optionally your mobile number (with its country code), company and profile photo. Your password is stored only as a one-way encrypted hash; we cannot read it.
Single sign-on — if you choose to continue with Google, Microsoft, Apple, Facebook, LinkedIn or GitHub, that provider shares your name, email address and an account ID with us so we can sign you in. We never receive your password for that service, and we do not access your contacts, posts, files or any other data held there.
Email verification codes — to confirm that an email address is yours, we email you 6-digit one-time codes when you sign up, change your email, reset your password or delete your account. Codes are stored only as a hash and expire within minutes.
Card and QR content — everything you choose to put on a business card (name, job title, photos, phone, email, address, social profiles, links, “about” text) and the content of your QR codes.
Leads — when a visitor uses the “Share your details” form on your card, we store the name, email, phone and message they submit, so that you can see them.
Usage counts — how many times a card is viewed or saved and how many times a dynamic QR code is scanned. These are simple counters and are not linked to the visitor’s identity.
Login history — for each account we keep only the last 3 logins: date and time (with your local time zone), approximate location (city, region and country worked out from your IP address), the IP address, the device or browser and how you logged in. Each new login overwrites the oldest one. You can see your last 3 logins on your dashboard. This protects your account against misuse.
No activity tracking — we do not keep a log of what customers do in their account. Only actions taken by Webtricks administrators are logged, for security.
SMS login codes — if you choose to log in with a code sent by SMS, we send your mobile number and the code to our SMS provider only to deliver that message.

2. How we use it

To create and run your account, show your cards to the people you share them with, and generate your QR codes.
To deliver leads to the owner of the card the visitor contacted.
To keep the Service secure — detecting suspicious logins, blocking automated abuse and enforcing rate limits.
To respond when you contact us for support.

We do not build advertising profiles and we do not make automated decisions about you.

3. What is public

A business card is meant to be shared. While a card is Active, anyone with its link or QR code can see the information you put on it. You decide what appears on a card, and you can switch a card to Inactive or delete it at any time. Your account details (login email, password, leads, statistics) are never shown publicly.

4. No commercial use of your data

Your personal data is used only to provide the Service to you. In particular:

We do not sell your personal data to any third party, and we never will.
We do not rent, trade, license or otherwise commercialise your personal data, your cards or your leads.
We do not share your personal data with advertisers, data brokers, marketing companies or any other third party for their own use.
We do not use your personal data for advertising, marketing campaigns or commercial profiling.

We share data only where it is strictly needed to run the Service, or where the law requires it:

With service providers that help us run the Service, only as far as needed: our web hosting provider (stores the database and files), our email provider (delivers verification codes and account emails), our SMS provider (delivers login codes, only if you log in by SMS), the sign-in provider you choose (Google, Microsoft, Apple, Facebook, LinkedIn or GitHub — only if you use it) and Cloudflare (Turnstile security check on login and sign-up forms, which processes your IP address and browser signals to tell people from bots). Fonts are loaded from Google Fonts. These providers may not use your data for their own purposes.
When the law requires it — for example a valid order from a court or a government authority in India. Where allowed, we will tell you first.

5. Cookies

The website uses one essential cookie that keeps you logged in. It is marked secure and HTTP-only and contains a random session token, not your personal details. We do not use advertising or tracking cookies. The Cloudflare Turnstile check may set its own strictly necessary cookies.

6. How long we keep data

We keep your data for as long as your account exists. Only your 3 most recent logins are kept. Login sessions expire automatically. When you delete a card, QR code, lead or your whole account, it is removed from our live database straight away. Copies may remain in routine server backups for a limited time until those backups are overwritten; they are not used for anything else.

7. Your rights and choices

See and download your data — from My profile → Download my data.
Correct it — edit your profile and cards at any time.
Delete it — use My profile → Delete my account. We email a 6-digit code to your account email to confirm it is really you; after you enter it, your account, cards, QR codes, leads and uploaded images are permanently deleted.
Ask us — about anything in this policy, or to exercise these rights, using the contact details below.

8. Security

We use HTTPS encryption, hashed passwords and session tokens, email verification by one-time code, captcha protection, login rate limits, role-based access for our staff and an activity log of administrative actions. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

10. Visitors who submit their details on a card

If you send your details through a card’s form, they are shared only with that card’s owner, who becomes responsible for how they use them. You can ask us to remove your details using the contact information below.

11. Reservation of rights and changes to this policy

Webtricks Software Pvt. Ltd. reserves all rights in respect of the Service and this Privacy Policy, including the right to update it. Whenever we change this policy, we will inform you — by a notice in your account and/or by email — update the “Last updated” date and add an entry to the change history on the policy page, where earlier versions stay available to read.

12. Contact

Webtricks Software Pvt. Ltd.
Email: [email protected]
Website: www.webtrickssoftware.com