Privacy Policy

Last updated: March 2024

At FollowUpCard, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our service.

Account Information

  • Name and email address when you create an account
  • Profile information for your digital business card (title, company, phone, photo)
  • Payment information when you subscribe to a paid plan (processed by Stripe)
  • Authentication credentials

Contact Data

  • Contacts you add to your account (names, emails, phone numbers, companies)
  • Notes, tags, and other metadata you associate with contacts
  • Event information you create or associate with contacts
  • Business card images you scan for OCR processing

Usage Data

  • Log data including IP address, browser type, and access times
  • Device information including operating system and device identifiers
  • Analytics data about how you use our service
  • Card view and scan statistics

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Create and manage your digital business cards
  • Store and organize your contacts and events
  • Generate AI-composed message drafts using your contact context
  • Send emails and SMS on your behalf through integrated messaging providers
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and abuse

Data Sharing

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf, including:
    • Supabase (database hosting and authentication)
    • GoHighLevel (email and SMS delivery)
    • Stripe (payment processing)
    • Analytics providers (anonymized usage data only)
  • CRM Integrations: When you connect a CRM integration, we sync contact data according to your configuration
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

You can request deletion of your data at any time by contacting us at [email protected] or through your account settings.

International Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that are different from those in your country. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Export: Export your data in a portable format
  • Opt-out: Opt out of marketing communications
  • Restriction: Request restriction of processing

To exercise these rights, contact us at [email protected].

Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit using TLS
  • Encryption of data at rest
  • Row-level security for database access
  • Regular security assessments and penetration testing
  • Least-privilege access controls
  • Secure authentication with optional two-factor authentication

Children's Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the “Last updated” date. For significant changes, we will provide additional notice via email or through the service.

Contact Us

If you have any questions about this Privacy Policy, please contact us: