Effective Date: 2 May 2026

This Privacy Policy describes how CardSnap ("we", "our", or "us") collects, uses, and protects your information when you use our mobile application and website at autocardai.app.

1. Information We Collect

Account Information

• Name (provided during signup)
• Email address (used for login and communication)
• Encrypted password

Lead and Contact Data

• Business card information you scan (names, phone numbers, emails, company details, addresses)
• Photos of business cards you upload for AI extraction
• Notes, priority labels, and any other lead details you add

HubSpot Integration (Optional)

• HubSpot OAuth access tokens (only if you connect your HubSpot account)
• These tokens allow CardSnap to push your leads to your HubSpot CRM at your request

2. How We Use Your Data

We use your data only to:

• Provide the core CardSnap service (scanning, saving, and managing leads)
• Authenticate your account and keep your data secure
• Sync leads to HubSpot if you have connected your account
• Send essential service emails (password reset, verification)

We do not sell, rent, or share your personal data with advertisers or any third party for marketing purposes.

3. Data Storage and Security

Your data is stored securely on Google Cloud Run servers in Asia-South2 region. All data is transmitted using HTTPS encryption. Passwords are hashed using industry-standard bcrypt. We do not have access to your plain-text password.

4. Third-Party Services

CardSnap uses the following third-party services:

• Google Cloud (hosting and AI): for backend hosting and AI-based card text extraction
• MongoDB Atlas: for storing your leads and account data
• Firebase Authentication: for Google Sign-In (only if you choose to sign in with Google)
• HubSpot: only if you explicitly connect your HubSpot account
• Netlify: for hosting our web application

5. Data Retention and Deletion

We retain your data as long as your account is active. You can:

• Delete individual leads anytime from within the app
• Request full account and data deletion via our account deletion page

Deletion requests are processed within 7 business days.

6. Children's Privacy

CardSnap is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have collected data from a minor, we will delete it immediately.

7. Your Rights

You have the right to:

• Access your data at any time within the app
• Correct or update your data via the in-app edit function
• Delete your data (individual leads or full account)
• Disconnect HubSpot integration anytime
• Request a copy of your data by emailing support

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice. The effective date at the top of this page indicates when the policy was last updated.

9. Contact Us

For privacy questions or to exercise your rights, contact us at:

support@autocardai.app