Privacy Policy

Last updated: 16 August 2026

BizCard (the “Service”) is operated by Rodrigo J. Pla Escalante (VAT ID ES26888711D), based in Spain. This policy explains what personal data we collect through the Service, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR).

We collect the minimum we need to run the Service, and we don’t sell your data or share it with advertisers. If anything here is unclear, email us at support@bizcard.es.

1. What we collect

Account data. When you create an account, we store your name, email address, and a securely hashed password (we never see or store your password in plain text) via our authentication provider, Supabase.

Card content. The contact details, bio, social links, logo, cover image, and wallet pass images you add to your digital cards are stored so your cards can be published and displayed.

Team data. If you’re on a Business or Enterprise plan, we store your organization’s name, company branding, member roles, and invitation details.

Visitor and lead data. When someone views a published card and chooses to share their details back with the card owner, we store the name, email, phone, and company they submit, and make it available to that card’s owner and their organization.

Analytics. We record privacy-conscious, aggregate usage events for published cards — views, contact saves, and link clicks — so card owners can see what’s working. We don’t run third-party advertising or tracking scripts.

Billing data. If you subscribe to a paid plan, our payment processor, Stripe, handles your card details directly and securely — we never see or store your full card number. We store only your subscription plan and status to control access to paid features.

Wallet pass data. If a card owner adds their card to Apple or Google Wallet, the relevant contact details and images are sent to Apple or Google to generate and keep that pass up to date.

2. Why we process it (legal basis)

• Account, card, and team data — necessary to provide the Service you signed up for (contract).
• Lead data submitted by a card visitor — provided with that visitor’s consent, for the purpose of introducing them to the card owner.
• Billing data — necessary to fulfil your subscription (contract) and our accounting obligations (legal obligation).

3. Who else sees it

We use a small number of service providers (data processors) to run BizCard. None of them are permitted to use your data for their own purposes:

• Supabase — hosts our authentication system, database, and file storage (account, card, team, and lead data).
• Stripe — processes payments for paid plans. We never see or store your full card details.
• Resend — sends transactional emails, such as team invitations.
• Google Wallet — if you choose to add a card to Google Wallet, the pass data you configure is sent to Google to create and update that pass. See Google’s own privacy policy for how they handle it.

4. Cookies and local storage

BizCard does not use advertising or cross-site tracking cookies. We use strictly necessary cookies and local storage to keep you signed in and to remember your session while using the dashboard.

5. How long we keep it

We keep your account, card, and team data for as long as your account is active. Lead data is kept for as long as the card that captured it remains in the owning account. If you delete your account, your data is permanently removed, other than what we’re required to retain for billing or legal record-keeping.

6. Your rights

Under GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to how we process it. You can:

• Delete your cards or your account at any time from your dashboard.
• Email support@bizcard.es for any other request — we’ll respond within 30 days.
• Lodge a complaint with Spain’s data protection authority, the Agencia Española de Protección de Datos (AEPD), if you believe your rights haven’t been respected.

7. Children

BizCard is not directed at children under 16, and we don’t knowingly collect data from them.

8. Changes to this policy

If we make material changes to this policy, we’ll update the date at the top of this page. Continued use of the Service after a change means you accept the updated policy.

9. Contact

Rodrigo J. Pla Escalante (BizCard) · Spain · support@bizcard.es