Privacy Policy

Who may use the service

SIDigiCards is currently offered only in the United States and is not intended for anyone under 18 years old. We do not knowingly collect personal information from children.

Information we handle

• Account information, including name, email, optional phone number, and authentication information managed by Supabase.
• Workspace memberships, roles, invitations, and administrative activity.
• Card information you provide, including biography, job title, company, contact details, addresses, websites, social links, themes, and templates.
• Uploaded media such as profile photos, logos, cover images, and media metadata.
• Plan, seat quantity, subscription lifecycle, invoices and payment-provider references. Stripe processes payment-card information; SIDigiCards does not receive complete card numbers.
• Usage events such as card views, QR scans, shares, button clicks, and vCard downloads, plus limited technical, security, rate-limit, and abuse-prevention information.
• Transactional email delivery information for account, invitation, and service communications.

Public cards and private data

Information placed on a published digital card is intentionally public and may be viewed, shared, indexed, or saved by others. Draft cards and private account, workspace, billing, and operational records are not public card content. You are responsible for choosing what to publish and for having authority to publish it.

How we use information

• Provide authentication, workspaces, card creation, publishing, QR codes, vCards, media, analytics, billing, and support.
• Operate subscriptions and enforce plan, storage, publication, and seat limits.
• Secure the service, prevent fraud and abuse, troubleshoot failures, and satisfy legal obligations.
• Send transactional messages. Optional marketing messages, if introduced, will use separate preference controls where required.

Providers and disclosures

We use Supabase for authentication, database, and storage; Stripe for payments and subscription management; Resend for transactional email; Cloudflare Turnstile for bot and abuse protection; and Netlify for hosting. These providers process information under their own terms and privacy practices. We may also disclose information when reasonably required by law, to protect rights and safety, or in connection with a merger, financing, acquisition, or sale, subject to appropriate safeguards.

SIDigiCards does not currently sell personal information or use optional advertising cookies.

Cookies and analytics

Essential session cookies keep users signed in and protect authenticated requests. Security providers and payment interactions may use necessary browser technologies. SIDigiCards records limited first-party product analytics events without operating an advertising-cookie program. See the Cookie Policy for details.

Retention and security

We retain information for as long as reasonably needed to provide and secure the service and meet dispute, fraud-prevention, legal, tax, accounting, and payment obligations. We use access controls, Row Level Security, server-only privileged credentials, and other safeguards, but no system can guarantee absolute security.

After an account-deletion request is completed, SIDigiCards will remove or de-identify applicable account content within a reasonable period, subject to backup cycles and records retained for fraud prevention, dispute resolution, legal compliance, tax, accounting, and payment obligations.

Your choices and requests

You can correct card content in Card Studio and review account information in Settings. To request access, correction, a portable data export, or account deletion, email us from your account email. We will verify identity and evaluate the request under applicable law. Transactional messages necessary for security, billing, and service operation cannot always be opted out of while an account remains active.

Residents may have additional state privacy rights depending on applicable law. We will not discriminate against a user for making a valid privacy request.

Changes and contact

We may update this policy as the service changes. Material updates will be communicated through a reasonable service notice. Questions and privacy requests may be sent to sidigicards@gmail.com.