Privacy Policy

1. Information We Collect

Account data: name, email address, phone number, and profile details you provide during registration.

Payment data: processed and stored by Stripe. We do not store full card numbers.

Scan analytics:when someone scans your card, we record the timestamp, approximate location (city/region via IP geolocation), device type, and referrer. We do not store the scanner's IP address.

Lead data: when a visitor submits the contact form on your profile, we store their name, email, phone (optional), and message.

2. How We Use Your Data

To operate your public profile and card functionality.
To provide scan analytics on your dashboard.
To process orders and send transactional emails.
To deliver leads submitted via your profile.

3. Data Sharing

We do not sell your data. We share data only with service providers essential to operating Vex Cards:

Supabase — database hosting and authentication.
Stripe — payment processing.
Resend — transactional email delivery.
Vercel — application hosting and edge network.

4. Data Retention

Account and profile data are retained while your account is active. Scan analytics are retained for the lifetime of the account. You may request deletion of your account and all associated data by contacting us.

5. Your Rights

You may access, correct, or delete your personal data at any time from your dashboard or by contacting us. If you are in a jurisdiction with specific privacy rights (CCPA, GDPR), we will honor applicable requests.

6. Security

We use encryption in transit (TLS), row-level security in our database, and hashed activation codes. No system is perfectly secure; we take commercially reasonable measures to protect your data.

7. Cookies

We use essential cookies for authentication sessions. We do not use advertising or third-party tracking cookies.

8. Changes

We may update this policy. We will notify users of material changes via email. Continued use constitutes acceptance.

9. Contact

For privacy questions, email hello@vex.cards.