Privacy Notice

• The business-card image you upload, and the OCR-extracted text (name, title, company, email, phone, website, country).
• A random session identifier we generate in your browser. No login required.
• For your own card only: company website data we look up to build your profile.

• Self cards — to generate your COMPUTEX route, exhibitor matches, and profile mirror.
• Contact cards — to save the card to your private contacts list (visible only via your session URL).
• Service operation: rate-limiting, abuse prevention, error logging.

Contact cards are not auto-included in our match pool, are not auto-emailed to the subject, and are not visible to other users.

• EEA / UK (GDPR) — legitimate interest in providing a business-networking service. You can object at any time.
• California (CCPA/CPRA) — service provision; B2B exemption no longer applies, so California subjects have full rights.
• Taiwan (PDPA) — Art. 19(1)(7) self-disclosure for self cards; legitimate b2b interest for contact cards.
• Other jurisdictions — equivalent legitimate-interest or contract-performance bases.

Cards and derived data are retained for up to 24 months from upload, after which they are deleted unless you have requested earlier deletion.

You have the right to access, correct, delete, port, restrict, or object to processing of your personal data. To exercise any of these rights:

Email privacy@namecard.ai. We respond within 30 days.

If you uploaded a contact card and the subject (the person on the card) wants it removed, the same email applies.

We do not sell personal data. We use the following processors strictly to operate the service:

• Vercel (US) — hosting + edge functions.
• Neon (US) — Postgres database.
• OpenAI / Anthropic / Google — LLM and OCR processing of card images and extracted text.

Data controller contact: privacy@namecard.ai (routes to tech@namecard.ai, monitored throughout COMPUTEX).