What is kept, who sees it, how long it stays and how to have it removed.
Your account details, whatever you put on your card, your links and their counts, the phones and computers that opened your card, the people who wrote to you through it, your invoices, and a record of the actions taken on your account. The Privacy page lists it in full, and Settings has a button that deletes the lot.
How many views, installs, taps and scans there were on a day, and a per-visitor record - the country, the browser, the page they arrived from - only where it is allowed; neither holds an IP address or a browser fingerprint. Exactly what a card keeps about a visitor is on the Privacy page (visitingcards.store/legal/privacy).
Visitors in the European Union, the United Kingdom, the wider European Economic Area and Switzerland are asked before a record of their visit is kept, and No means no visit record. What a card keeps whatever they answer is on the Privacy page (visitingcards.store/legal/privacy). The decision is made on our own server from where the request came, not from anything the browser claims, so it cannot be worked around.
No advertising cookies and no third-party trackers. A card page keeps a note of the visitor's own choice about analytics in their browser, and a signed-in dashboard keeps a session cookie so you stay signed in. That is all.
Our database provider stores it, our hosting provider serves the site, Stripe in the United States handles payments (we never see or store a card number), and our other suppliers or service providers send the emails we send you. If you use the wallet pass or WhatsApp, those services see what they must to deliver a pass or a message. The Privacy page names each one and what it does.
Per-visitor session records are removed after 120 days. Message words - emails, WhatsApp and support messages - are cleared after 120 days while the record that they happened is kept. Error and delivery logs go the same way. Your leads, the list of phones and computers that opened your card, your account and the audit trail are not swept away on a timer.
Because deleting the row would rewrite history: a support thread that never happened, an invoice with no email against it. Clearing the WORDS removes what is personal and keeps the fact that something took place, which is what a record is for.
They can email us and say which card they wrote to, and we erase what we hold within thirty days. You can also remove their row from your own People screen. Both are fine; if they have asked us we will do it whether or not you do.
Cancel what you pay for first: deleting never cancels a plan or an add-on for you. While your Pro plan or an add-on can still renew, the delete button is greyed and a line says what to cancel on Billing first; a company's seats or a payment still open need us, and the line says to write to us. Once everything is set to end, go to Settings, at the bottom, Delete this account. It removes the account and everything hanging off it, then the sign-in itself. A review of yours that we published stays on our website, with your name replaced by "A VisitingCards.store customer" and your photo, your job title and your company taken off; one we have not published goes with the account. Nothing more is charged, and the rest of a period you have already paid for is not refunded. Your tax invoices are kept, because a tax document has to outlive the account it was raised against.
Yes. People has Export to CSV for your contacts, Analytics has an export of your daily counts, and your card's design downloads as PDF, PNG or SVG. Ask us if you want something we have not put a button on.
A short notice for the VISITOR, saying who is collecting their details when they fill in a form - the card holder, or the company on a team card - what happens to it, and how to have it erased. It is on every card, on every host, and it is not something a holder can switch off.
Every card carries a Report this card link. Give the reason and, if you want a reply, an email. When several separate people report the same card it is paused automatically, its owner is told, and a person looks at it. We aim to deal with a report within two working days.
Several things at once. Links a free card points at carry a mark telling search engines not to follow them, so a card is worthless for that purpose. Sign-up, the lead form and the report form all sit behind a captcha and a strict limiter, uploads are checked by their real bytes, and a card's text is screened when it is published.
Yes. Every action that matters - publishing, pausing, exporting contacts, changing a plan, a seat hand-over, a staff action on our side - writes a row saying what happened, when, and who did it. Exports of personal data are recorded with their row count.
Our own console is limited to named staff and every action there is recorded. Staff do not browse holders' contacts, and nothing in the console is a place to read a lead's message for interest's sake.
Only if you let it. There is a Search Engine Indexing switch on your Cards screen and under Settings; turn it off and we ask search engines not to list your card. It does not make the page secret - anybody with the link still opens it.
The forum is where questions get answered in public, so the next person finds the answer too.