Privacy Policy

This Privacy Policy explains how we — the provider of BizCardPro.AI, based in Hong Kong SAR (“we”, “us”, “our”) — collect, use, share, and protect your information when you use the BizCardPro.AI application, websites, and related services (the “Service”). It forms part of our Terms & Conditions.

1. Information We Collect

Account information. When you register we collect your email address, display name, and sign-in method (email & password, or a third-party provider such as Google). Passwords are handled by our authentication provider; we never store them in plain text.

Your Content. The business-card images you photograph or upload, the contact details extracted from them (names, companies, titles, phone numbers, emails, addresses), and the tags, notes, follow-up dates, and digital business cards you create.

Payment information. If you purchase a paid plan, payment is handled by Stripe. We receive your subscription status and a billing reference — we never see or store your full card number.

Waitlist information. Before launch, you may give us your email address to be notified when the Service opens. We store only that email address, the page you submitted it from, and your language preference. We use it for one purpose — to tell you when the Service is available — and you can unsubscribe from any message we send. We do not sell it or use it for unrelated marketing.

Usage and device information. Basic technical data needed to run and secure the Service, such as app version, device/browser type, language preference, and scan-quota usage.

Website analytics and cookies. On our public website we use Google Analytics 4 to understand which pages people find useful — for example page views, approximate location derived from IP, referring site, device type and language. IP addresses are anonymised. We use this only in aggregate to improve the site; we do not use it to build advertising profiles, and advertising and personalisation signals are switched off.

Google Analytics normally sets cookies. For visitors in the European Economic Area, the United Kingdom and Switzerland, analytics storage is denied by default — no analytics cookie is set unless and until you give consent — so those visits are measured only in aggregate, cookieless form. Outside those regions analytics cookies are set by default. You can change your choice at any time using the “Cookie preferences” link in the site footer, block cookies in your browser at any time, and browser “Do Not Track” or Global Privacy Control signals are respected where your browser sends them (when either is on, no analytics loads at all). The app itself uses only the storage required to keep you signed in and to run the Service; it carries no advertising trackers.

Referral information. If you use referral links, we record the referral relationship to credit bonus scans.

2. How We Use Your Information

• To provide the Service — extracting contact details from your card images, syncing your archive across devices, sending follow-up reminders you set, generating QR codes and digital-card pages, and processing exports.
• To operate billing — managing subscriptions, quotas, and referral bonuses.
• To keep the Service safe — preventing abuse, enforcing quotas, and securing accounts.
• To improve the Service — analysing usage and content, typically in aggregated or de-identified form, to improve accuracy, quality, and features, as described in our Terms.
• To communicate with you — service messages such as email verification, billing notices, and material changes to the Service.

We do not sell your personal information.

3. AI Processing of Card Images

When you scan a card, the image is sent to a third-party AI provider to extract the printed contact details, under that provider’s data-processing terms. It is sent solely to return the extracted fields. The extracted results are returned to your account; the card image and its extraction are stored in your archive so you can verify and edit them.

4. Where Your Data Is Stored

Your data is stored with established cloud infrastructure providers that handle authentication, database, and file storage on our behalf, under industry-standard encryption in transit and at rest. They are contractually bound to process your data only on our instructions. Cloud infrastructure may be located outside your home jurisdiction, including outside the EEA; where personal data is transferred internationally we rely on recognised safeguards such as standard contractual clauses. The specific providers we use are available on request.

5. When We Share Information

We share information only with:

• Our affiliated companies. We may share information within our corporate group — entities under common ownership or control with us — where needed for the purposes described in this policy, such as operating and improving the Service, customer support, billing, and security. Any affiliate handling your information is bound by protections consistent with this Privacy Policy.
• Service providers (processors) that run the Service for us: cloud infrastructure (hosting, authentication, storage), a third-party AI provider (card-image extraction), Stripe (payments), Google Analytics (website usage measurement), and — for the pre-launch waitlist only — the form/email provider that stores those addresses. Each is contractually bound to use your data only to provide those services to us. The specific processors we use are available on request.
• People you choose to share with. If you publish a digital business card, the details on it are publicly accessible to anyone with the link or QR code — that is its purpose. You can unpublish it at any time.
• Legal requirements. We may disclose information where required by law, regulation, or valid legal process, or to protect the rights, safety, or property of users, the public, or the Service.

6. Retention and Deletion

We keep your data for as long as your account is active. You can delete individual cards at any time. To delete your entire account and its data, email termination-request@bizcardpro.ai from your registered email address (see the Terms for the verification details we need). Verified requests are processed within 30 days. Some records may be retained after deletion where required for legal, security, accounting, or fraud-prevention purposes.

7. Your Rights

Subject to applicable law — including the Hong Kong Personal Data (Privacy) Ordinance (PDPO) — you may:

• Access and correct your personal data (most of it is directly editable in the app);
• Export your data at any time using the built-in CSV, Google Contacts, and vCard exports;
• Delete your data (see Section 6);
• Object or complain — contact us at sales@bizcardpro.ai, and you may lodge a complaint with your local data-protection authority (in Hong Kong, the PCPD).

If you are in a jurisdiction with additional rights (for example, the EU/UK GDPR), we honour applicable requests through the same contact route.

8. Business Cards Contain Other People’s Data

A business card you scan contains someone else’s contact details. You are responsible for having the right to digitize and store that information (a card handed to you in a business context is normally given for exactly that purpose). We process it solely on your behalf, as part of your private archive. If someone asks you to remove their details, please delete the card from your archive.

9. Security

We use industry-standard measures: encrypted connections (TLS), encryption at rest, scoped access rules so your data is only readable by your account, and administrative access controls with audit logging. No system is perfectly secure; please use a strong, unique password and keep your sign-in method protected.

10. Children

The Service is not directed at children and is intended for users who are at least the age of majority in their jurisdiction. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, in-app or by email). The “Last updated” date above always reflects the current version.

12. Contact

Privacy questions: sales@bizcardpro.ai Account deletion requests: termination-request@bizcardpro.ai