Privacy Policy

• Account details: your name, email address, mobile number, business name and a password (stored only as a secure hash). If you sign in with Google, we receive your name, email and profile photo from Google.
• Card content: everything you add to your cards — photos, logos, services, products, gallery images, social links, addresses and contact details. Most of this is meant to be public, because it appears on your card.
• Payment records: the plan or add-on you bought, the amount, dates and the transaction reference, and for a GST invoice the billing name, address, state and GSTIN you give us. Card, UPI and bank details are entered on Razorpay's secure checkout — they never reach our servers.
• NFC card and standee orders: the details you ask us to print, and the delivery name, address, PIN code and mobile number.
• Custom domains: the domain names you connect to your card.
• Card visit data: when someone opens a card we record things like the time, device and browser type, approximate location, how they arrived and what they tapped (call, WhatsApp, save contact). A random visitor ID is kept in their browser so repeat visits aren't double-counted.
• Enquiries (leads): the name, phone, email and message a visitor submits through the enquiry form on a card.
• Support and communication: messages you send us by email, WhatsApp or phone, and whether our emails were delivered.

The app works on the same account and card as the website. On your phone it also uses:

• Signed-in phones: the phone's name, type and app version, so you can see where you're signed in and sign a phone out (More → Signed-in devices). The app keeps its sign-in in your phone's secure storage.
• Notifications: if you allow them, a notification address for your phone, so we can tell you the moment someone enquires. Notifications are delivered through Expo's push service, Apple Push Notification service and Google's Firebase Cloud Messaging. Follow-up reminders you set are scheduled on your phone itself.
• Photos and camera: only a photo you choose or take for your card. It's resized on your phone and saved to your card; the app doesn't look through your photo library.
• Contacts: when you tap “Save to contacts” on an enquiry, the app opens your phone's own new-contact screen with the details filled in. The app doesn't read your contacts.
• Exports: a spreadsheet of your enquiries is created on your phone and goes only where you choose to share it.

The app has no advertising or tracking tools and doesn't track your location.

We use personal data only to run and improve DigitalCarda:

• Create your account, host your cards and keep them online
• Show you card views, clicks and enquiries in your dashboard
• Process payments, issue receipts and manage your plan
• Send essential emails — sign-in, password resets, trial and renewal reminders
• Answer support requests
• Send product news and offers (you can opt out any time)
• Keep the platform secure and prevent fraud, spam and abuse
• Understand how features are used so we can improve them

When a visitor sends an enquiry through your card, that information is delivered to you, the card owner: it appears in your dashboard, and we email it to you too if you keep “Email me each new enquiry” switched on. You decide how to use it and are responsible for contacting people lawfully and respectfully.

Each enquiry is checked automatically for spam. If the visitor gave an email address, we send them a short confirmation on the business's behalf. Our team also receives a copy of each enquiry that isn't spam, to keep the service working and to spot spam and abuse. We don't use enquiries to market to those visitors ourselves.

If you visited a card and want your enquiry removed, contact the business on that card, or write to us at [email protected] and we'll help.

If you use our AI tools (for example to draft your “About” section or services), the details you type are sent to our AI provider, Anthropic, only to generate that text. They aren't used to advertise to you, and you can edit or discard anything the AI writes before it goes on your card.

We do not sell or rent personal data. We share it only with:

• Service providers: companies that help us run DigitalCarda — server hosting, email delivery, Razorpay for payments, Google for sign-in, Anthropic for AI writing, a courier for NFC card and standee deliveries, and Let's Encrypt, which issues the HTTPS certificate for a custom domain (it receives only the domain name). They may use the data only to provide their service to us.
• Resellers: if a DigitalCarda reseller or agency set up your card or introduced you to us, they can see your name, contact details, account status and the plan payments you make while you're their customer. If a reseller created your account for you, they chose its first password and can sign in and manage your card until you change it in your dashboard settings.
• The public: content you publish on your card is visible to anyone with the link or QR code.
• Legal requirements: authorities, when the law requires it, or to protect the rights and safety of our users and DigitalCarda.

Payments are processed by Razorpay, which is PCI-DSS compliant. We receive a confirmation and a transaction reference — never your full card number, CVV, UPI PIN or net-banking password. Razorpay's own privacy policy applies to the details you enter on its checkout.

• HTTPS encryption on every page and card
• Passwords stored only as one-way hashes
• Sign-in sessions in secure, HTTP-only cookies
• Password-reset links that work once and expire in 1 hour
• Limits on repeated sign-in and reset attempts
• Access to customer data restricted to people who need it

Our support team can open your dashboard when you ask for help or to fix a problem with your account.

No system is perfectly secure. If we become aware of a breach that affects your personal data, we'll inform you and the relevant authorities as the law requires.

We keep your account and card data while your account is active. If your plan or trial ends, your data is kept for a period so you can renew without starting over. If you delete your account — in the app under More → Delete account, or at digitalcarda.in/account/delete — it is switched off and your card is paused straight away. After 30 days, so you can change your mind, we erase your cards, enquiries and personal details. We keep only records we must keep by law, such as payment and tax records. A GST invoice, and an NFC card or standee order, keep the name, address and contact details written on them; the rest are kept without your name or contact details attached.

You can:

• See and update most of your details in your dashboard
• Ask for a copy of the personal data we hold about you
• Ask us to correct anything inaccurate
• Delete your account — in the app (More → Delete account) or on our website
• Withdraw consent and unsubscribe from marketing emails
• Nominate someone to exercise these rights on your behalf

To delete your account yourself, use digitalcarda.in/account/delete. For anything else, email [email protected] from your account email address. We may need to confirm it's you before acting, and we'll respond as soon as we can.

We use a small number of cookies and browser storage items, mainly to make the site work:

• Essential: keep you signed in and protect your account.
• Preferences: remember choices such as the template you picked or a draft in progress.
• Card analytics: a random visitor ID so card owners see accurate view counts.
• How you found us: the first page you opened on our site and the day, the website that sent you (its name only), the campaign labels or referral code in the link, and whether it carried a Google or Facebook/Instagram click ID (never the ID itself); and the same for your latest campaign link after that. We keep it only if you then create an account: it is stored with your account so our team can see how people find us, and erased when your account is erased.

You can clear or block these in your browser settings, but you may be signed out and some features may stop working.

DigitalCarda is a business tool and isn't meant for anyone under 18. We don't knowingly collect data from children. If you believe a child has given us personal data, contact us and we'll delete it.

We'll update this policy when our services or the law change. The “Last updated” date at the top shows when. For significant changes we'll also let you know by email or in your dashboard.

For privacy questions, requests or complaints, email [email protected] or call +91 95177 22444. If you're not satisfied with our response, you may approach the Data Protection Board of India.

See also our Terms & Conditions and Refund Policy.