Last updated June 3, 2026
Privacy Policy
This policy explains what pic.cards collects, how the service uses business card and account data, and how to contact us about privacy requests.
What we collect
We collect account details such as name, email address, authentication identifiers, team membership, and settings needed to operate your workspace.
When you scan or upload business cards, we process card images and extracted contact fields such as names, companies, job titles, phone numbers, email addresses, websites, notes, groups, and related metadata.
We also collect usage, billing, device, support, and security logs needed to run the service, investigate abuse, and support customer requests.
How we use data
We use data to provide scanning, OCR, organization, sharing, export, billing, support, abuse prevention, and service reliability features.
We do not sell personal data. We do not use customer card libraries to train external foundation models.
OCR and infrastructure providers may process limited data as subprocessors so the product can perform the requested scan or workflow.
Business card contacts
Customers are responsible for ensuring they have a lawful basis to upload and use business card information in their workspace.
If you believe your contact details were added to pic.cards by a customer and you want them reviewed or deleted, contact support@pic.cards with enough detail for us to identify the record.
Retention and deletion
We retain account and workspace data while an account is active or while needed for legal, security, billing, backup, and audit purposes.
Deletion requests can be sent to support@pic.cards. Some backup copies may remain for a limited period before they age out of backup retention.
Security
We use authenticated access controls, transport encryption, storage controls, operational logging, and limited employee access to protect customer data.
No internet service can guarantee absolute security. Customers should avoid uploading data they are not authorized to process.
International processing and PDPA
pic.cards is operated from Singapore and may use subprocessors in other jurisdictions. Where Singapore's PDPA applies, we handle personal data according to applicable accountability, protection, retention, and access principles.
For privacy requests, contact Pic.Cards Data Protection Officer at support@pic.cards. Enterprise customers can review the current subprocessor list at /subprocessors and request additional data handling details through the same channel.