Privacy Policy

Card6 ("we", "our", "us") is a digital business card service. If you have questions about this policy, contact us at privacy@card6.app.

We collect only what is necessary to provide the service:

• Account data — your name, email address, and profile picture, obtained via Google or LinkedIn OAuth at sign-in.
• Card data — information you voluntarily enter on your digital card (job title, company, phone, website, social links, bio).
• Avatar photo — an optional photo you upload for your card.
• Usage data — standard server logs (IP address, browser, pages visited) retained for up to 30 days.

We do not collect payment information. The service is free.

• To authenticate you via Google or LinkedIn.
• To display your digital business card to anyone you share the link with.
• To send you service-related emails (e.g., account security notices).

We do not sell your data or use it for advertising.

We use OAuth provided by:

• Google LLC — Google Privacy Policy
• LinkedIn Corporation — LinkedIn Privacy Policy

These providers may collect data according to their own policies when you authenticate.

Your data is stored in a PostgreSQL database hosted on a private server. Uploaded photos are stored on the same server. We use HTTPS for all data in transit. No data is shared with third parties except the OAuth providers listed above.

Your data is retained while your account is active. You can request deletion of your account and all associated data by emailing privacy@card6.app. We will process deletion requests within 30 days.

If you are in the European Economic Area, you have the right to access, correct, export, or delete your personal data. Contact us at privacy@card6.app to exercise any of these rights.

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of Card6 after changes constitutes acceptance.