Privacy Policy

1. Card owners

We collect what you give us to run your account and card:

• your phone number or email for sign-in, and your name;
• the details you add to your card: photo, title, company, numbers, emails, website, address, socials, links and images;
• orders, payment references and delivery addresses for printed or NFC items. Card details are handled by Paystack or Flutterwave; we never see or store your card number.

Our lawful basis is the contract with you: we need this data to provide your card. You choose which fields are public, and you can hide any field without deleting it.

2. People who view a card

Opening a card needs no account and sets no cookies. We count views, saves and button taps in aggregate. We do not store IP addresses, and repeat views are recognised with a hashed key that changes every day, so no visitor can be identified or tracked across days. We use no third-party advertising trackers.

If you choose to use a card’s “Share your details” form, the details you type are sent to that card’s owner.

3. Search engines

Cards are hidden from search engines by default. An owner can choose to allow search indexing.

4. Team accounts

If your card is part of a company team, the company’s admins can see your card, its status and its aggregate analytics, and they control the company fields on it. They cannot see your sign-in code or edit your personal fields.

5. Who we share data with

• Payment providers (Paystack, Flutterwave) to take payments.
• SMS and email providers to send sign-in codes, receipts and updates.
• Hosting, storage and content-delivery providers that run the service.
• Print and NFC partners, only for orders you place.
• Authorities, where the law requires it.

We do not sell personal data.

6. Security and retention

Data is encrypted in transit; sign-in codes are stored only as hashes; admin access requires two-factor authentication and every admin action is logged. When you delete your account, your data is removed within 7 days and drops out of our encrypted backups within 30 days. Payment records are kept as long as tax law requires.

7. Your rights

You can access, correct, export or delete your data at any time from your dashboard (Account → Export my data / Delete account). You may also object to processing, ask us to restrict it, or complain to the Nigeria Data Protection Commission. To exercise any right, email hello@smartcontakt.com.

8. Changes

We will tell you about material changes to this policy before they apply.