eCardPro Privacy Policy

We collect information in direct connection with providing, securing, and maintaining our digital business card services:

• Account Information: Name, registered email address, authentication credentials managed securely via Supabase Auth, chosen username/slug, and role assignment. Passwords are saved in a hashed format; plaintext passwords are never accessible to eCardPro staff.
• Contact & Profile Information: Full name, professional headline, designation, company name, department, phone number, WhatsApp contact number, public email address, physical location or city, bio/summary text, and personal or company website URLs.
• Public Card Information: Data published on your digital business card accessible at /c/:username and exported as a standard .vcf contact card. Cards in Draft state remain strictly private and unindexed.
• Uploaded Media & Storage: Profile avatars, company logos, and card banner images stored securely via Cloudinary or R2 object storage with signed secure URLs.
• Leads & Visitor Inquiries: Form submissions from visitors on your public card. Protected by Supabase Row-Level Security ensures strict multi-tenant isolation where Visitor A cannot see Visitor B submissions, and only the card owner has access.
• Analytics & Performance Metrics: Interaction telemetry including card views, contact clicks, deduplication mechanisms to avoid inflated metric counts, and quota usage calculations.
• Payment & Wallet Information: Fixed ₹50 UPI recharge records, 12-digit Bank Reference Numbers (UTR), double-entry transaction ledgers for ₹10 usage blocks, and timestamps. eCardPro never collects or stores banking passwords or UPI PINs.

We process collected data exclusively for explicit, legitimate operational purposes:

eCardPro is designed for professional networking while honoring clear privacy boundaries:

• Published Cards: When you set a card to Published, the profile details and contact actions you entered become openly viewable at your public URL (/c/:slug) without requiring visitors to create an account or sign in.
• Draft & Suspended Cards: Cards set to Draft or Suspended are strictly inaccessible to the public. The system returns HTTP 403/404 states and prevents exposure of phone, email, WhatsApp, or lead forms.
• Private Workspaces: Your account settings, wallet transactions, lead submission inbox, and billing records are private and protected by database Row-Level Security (RLS).

Visual assets uploaded to customize cards are processed through secure storage providers:

• Storage Providers: Media files are stored using Cloudinary or Cloudflare R2 object storage. Uploads require signed authorization to prevent arbitrary storage tampering.
• Content Ownership: You retain ownership of all photographs, corporate logos, and portfolio media you upload. You grant eCardPro only the non-exclusive technical license required to host, scale, and deliver those assets on your public cards.
• Replacement & Deletion: Updating or removing media in your card editor unlinks the old asset from your public card and schedules it for cleanup.

To maintain high uptime and fast edge performance, eCardPro utilizes selected infrastructure partners:

• Hosting & Edge Delivery: Vercel (Edge serverless runtime and CDN delivery).
• Database & Authentication: Supabase (PostgreSQL database with Row-Level Security and auth services).
• Media Delivery: Cloudinary / Cloudflare R2 (image transformation and asset delivery).
• No Invasive Advertising Trackers: We do not sell your personal data or deploy cross-site advertising tracker networks on your cards.

You maintain direct control over your digital business profile information:

• Editing & Updating: Card details, contact actions, and branding can be modified in real-time in your dashboard.
• Lead Export: Card owners and enterprise administrators can view and export inquiries received through their cards.
• Account Deletion: You may close your account and delete your cards at any time via Account Settings. Deleting an account unlinks cards and purges profile data from active visibility.