Privacy Policy
Last updated 11 October 2026
CardyLink gives companies digital business cards for their people. This policy explains what we collect when you use cardylink.com, why, who helps us, and the choices you have. If anything is unclear, write to hello@cardylink.com.
Who is responsible
A company that signs up decides whose cards are made and what is done with the contacts its people collect. For that information we act on the company’s behalf. For our own records, such as accounts, orders and the running of the service, CardyLink is responsible.
What we collect
- Accounts: name, work email, company, role, and a password, which we store only in a scrambled form we cannot read back.
- Cards: what is put on a card, such as a photo, name, job title, phone numbers, email, links, address and the company’s logo and colours.
- Card visits: when a card is opened we note the day, how it was opened (QR code, printed card, email signature or link), whether it was a phone or a computer, and the country. The country is worked out from the network address on our own server, using the DB-IP Lite database. We do not keep the network address itself; we keep a short code made from it and the browser, which changes every day, so that one visitor is counted once.
- Taps: which buttons and links on a card are tapped, counted the same way.
- Contacts (leads): details a visitor chooses to send from a card (such as name, email, phone, company and a message), and contacts that people add themselves, including photos of paper business cards, notes, photos and voice notes.
- Orders: what a company orders from our shop and who to contact about it.
How we use it
- To show cards, count their visits and give each company its numbers.
- To send the emails the service needs: sign-in codes, invitations, new contact alerts, plan reminders and order updates.
- To read a photo of a paper business card into a contact form, when someone chooses to scan one.
- To keep the service safe, fix problems and answer support requests.
We do not sell personal information, and we do not show advertising.
Who helps us
- Hosting: our servers are rented from Hostinger.
- Email: Resend delivers our emails.
- Reading paper cards: when someone scans a paper business card, the photo is sent to Google (Gemini) or Anthropic (Claude) to read its text. These companies process the photo outside the United Arab Emirates and return the text to us.
- Phone wallets: when someone adds a card to Apple Wallet or Google Wallet, the card’s details go to Apple or Google to make the pass.
Some of these services are outside the United Arab Emirates, so information may be processed in other countries.
Cookies and storage
We use one cookie to keep you signed in, and one to remember how you like to see your team. On a card, the browser remembers whether you have already answered the card’s contact form, so it is not shown again. We use no advertising or tracking cookies.
How long we keep it
- Account, card and contact information is kept while the company uses CardyLink.
- When a company turns off someone who has left, their private contacts can be downloaded through a link for 30 days, then they are deleted.
- When a company asks us to close its account, we delete its information within 30 days. Copies in our backups are replaced as the backups roll over.
Your choices
You can see and change your own details from your account. To get a copy of your information, correct it or have it deleted, ask your company’s CardyLink admin or write to us. If you sent your details from someone’s card and want them removed, write to us with the card’s link and we will pass your request on and act on it.
Keeping it safe
Everything travels over an encrypted connection. Passwords are never stored as written. Private files, such as notes and photos, are shown only to people allowed to see that contact.
Children
CardyLink is a service for companies and is not meant for children.
Changes
If we change this policy we will update the date above, and tell company owners by email when the change matters.
Contact
CardyLink, Dubai, United Arab Emirates. hello@cardylink.com. See also our Terms of Use.