Privacy Policy

Last updated: June 2, 2026 · Effective date: June 2, 2026

SnapCard ("SnapCard," "we," "us," or "our") is a business-card scanning and contact follow-up tool operated by Voltek Systems Inc. We respect your privacy and the privacy of the contacts you scan. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

If you have questions, email lee@voltekinc.com.

1. Who this policy applies to

Users — individuals who create a SnapCard account and use the service.
Scanned contacts — third parties whose business card information a user has captured and uploaded to SnapCard.

2. Information we collect

From you (the account holder)

Account information: email address, password (stored only as a salted scrypt hash — never in plain text), display name, optional company, title, and email signature.
Session metadata: session tokens, IP address, and user agent string, used to keep you signed in and protect your account.
Email tracking events: when you send emails through SnapCard, we record the message ID, recipient, subject, and lifecycle events (delivered, opened, clicked, bounced) reported back by our email provider.
Custom sending domain (Pro feature): if you verify your own sending domain, we store the domain name and DNS verification status.

From the cards you scan

Card images you upload, sent to our AI provider for one-time extraction (see Section 4).
Extracted contact data the AI returns: first name, last name, email, phone, company, title, website, LinkedIn URL, mailing address, and any notes you add manually.
Pipeline metadata you assign to a contact: stage (New / Contacted), notes, and the timestamps of your interactions.

3. How we use this information

To provide the core service: scanning cards, storing your contacts, sending and tracking follow-up emails.
To authenticate you and protect your account (session management, brute-force protection).
To send you transactional emails (email verification, password reset, account notices).
To debug, monitor reliability, and improve product quality (server-side error logs, request-level diagnostics).
To enforce our Terms of Service and comply with legal obligations.

We do not sell your data. We do not use your contact list to market to anyone other than you. We do not target advertising based on your data.

4. Third parties that process your data

SnapCard relies on the following sub-processors to operate. Each is bound by their own terms and applicable data protection laws.

Provider	Purpose	Data processed
OpenAI	Vision AI extraction from card images	Card image + extracted text. Per OpenAI's API terms, this data is not used to train OpenAI's models.
Resend	Outbound email delivery + event tracking	Sender, recipient, subject, body, delivery/open/click events.
Neon	Postgres database hosting	All persisted user and contact data.
Vercel	Web hosting + runtime	HTTP request logs, IP addresses, performance telemetry.
GoDaddy / Vercel DNS	Domain registration + DNS	Domain records only; no user content.

We do not share your data with third parties beyond these sub-processors except where required by law or with your explicit consent.

5. Where we store data

Servers are located in the United States. If you access SnapCard from outside the United States, your data will be transferred to and processed in the United States. By using SnapCard you consent to this transfer.

6. How long we keep your data

Account and contact data: retained while your account is active.
Session tokens: 30 days from last use (sliding window), then automatically expired.
Email logs: retained while your account is active so you can review email history.
Backups: rolling 30-day backup retention by our database provider.

You can permanently delete your account and all associated data at any time from Account → Delete account inside the app. Deletion is immediate and irreversible.

7. Your rights

You have the right to:

Access the personal data we hold about you (request a copy by email).
Correct inaccurate data (edit your profile and contacts directly in the app).
Delete your account and all your data (Account → Delete account).
Export your contacts as CSV (Contacts → CSV).
Withdraw consent for any optional processing.

Residents of the EU, UK, or California have additional rights under GDPR / UK GDPR / CCPA, including the right to data portability and the right to lodge a complaint with a supervisory authority. Email lee@voltekinc.com to exercise any of these rights.

8. Information about scanned contacts

If you scan a business card and upload it to SnapCard, you are responsible for ensuring you have a legitimate business reason to process that contact's information. SnapCard processes scanned-contact data only at your direction, as our "data processor" within the meaning of GDPR. You are the data controller for the contacts you save.

A scanned contact may request information about, correction of, or deletion of their data by contacting you directly. If they contact SnapCard, we will refer them to you as the controller.

9. Security

All traffic is encrypted in transit using TLS 1.2 or higher.
Passwords are hashed with scrypt using a per-user random salt; we never store or have access to your plaintext password.
Session tokens are 256-bit randomly generated and stored only as opaque values.
API endpoints are protected by per-user authorization checks; you cannot access another user's contacts.
Webhook signatures from our email provider are verified using HMAC-SHA256.

No system is perfect. If you suspect a security issue, email lee@voltekinc.com.

10. Children

SnapCard is a B2B sales tool intended for adults conducting business outreach. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We will update this policy from time to time. Material changes will be announced via email to active account holders and reflected in the "Last updated" date above. Continued use of SnapCard after the effective date of a change constitutes acceptance.

12. Contact

Voltek Systems Inc.
Attn: SnapCard Privacy
Austin, Texas, United States
lee@voltekinc.com