Digital business card security and data privacy at CardDeck

CardDeck holds three kinds of data: the details you put on your cards, the contacts people choose to share with you, and aggregate analytics about how your cards and codes are used.

• Card data. Your name, title, photo, logo, links and contact details, plus the content of ID cards, badges and membership cards you create. For batch jobs, this includes the rows of the CSV or Excel file you upload.
• Captured contacts. When someone opens your card and fills in the contact exchange form, the details they choose to share are stored in your account so you can tag, annotate and export them.
• Usage and analytics. Counts of views and scans, with date, sharing channel, device type and approximate region.
• Account and billing data. Your login email, workspace settings and billing records.

We collect what the product needs to work and nothing more. See the privacy policy for the full list and legal basis.

Every connection to CardDeck uses HTTPS, encrypted with TLS. That covers your public card pages, dynamic QR code redirects, the dashboard where you edit cards, file uploads for batch jobs and contact exchange forms.

This means someone on the same café WiFi as you, or as the person scanning your card, cannot read or alter the data passing between their phone and CardDeck. Card links use the carddeck.co domain, or your own custom domain on the Business plan.

Only you and the people you authorize can see your private data. Public card pages show exactly the fields you choose to publish; everything else, including captured contacts and analytics, stays behind your login.

Team roles and permissions

In a team workspace, access is controlled by role:

• Owners manage billing, workspace settings and every member.
• Admins invite and remove members, manage templates and deactivate or reassign cards.
• Editors create and update cards and templates within the workspace.
• Members edit their own card details within the locked template.

Locked brand templates mean members can change their phone number or photo but not the design, so nobody can publish an off-brand or misleading card under your company name. On the Business plan, single sign-on (SSO) lets you manage access through your existing identity provider.

Internal access

CardDeck staff access customer data only when it's needed to provide the service, for example to investigate a support request you've raised, and only with the minimum access required.

An admin can deactivate or reassign the person's card in one click from the team dashboard. Deactivation takes effect immediately.

For business cards, the public page stops showing the former employee's details, so prospects are never left with a dead number or a contact who no longer represents you. You can reassign a shared card, such as a territory or reception card, to someone else so the printed QR code keeps working.

For employee ID cards, the QR code on the card opens a verification page that shows whether the ID is active. Deactivate an ID and that page updates straight away, so security and reception can see that a card is no longer valid even if the physical card hasn't been returned. This is one reason enterprise teams manage IDs and business cards in the same workspace.

CardDeck analytics are privacy-first: we record aggregate counts, not people. For each card view or dynamic QR code scan, we record the date, the sharing channel, the device type and an approximate region.

What we do not do:

• We don't identify the person who scanned a code or opened a card.
• We don't build profiles of visitors or follow them across other websites.
• We don't sell visitor data.

A visitor becomes a named contact only if they choose to share their details through the contact exchange form. Even then, those details belong to the card owner's account and are used to follow up, not for advertising. Learn more about how this works in contact management.

Yes. Your data is yours, and you can take it with you or remove it.

• Export contacts. Export captured contacts to CSV from the Pro plan, with CRM export on Team and Business.
• Export analytics. Basic analytics with CSV export on Pro; advanced analytics with export on Business.
• Delete contacts and cards. Remove individual contacts or cards from your dashboard at any time.
• Delete your account. Ask us to delete your account and associated data by emailing support@carddeck.co. We'll confirm your identity first.

If someone who shared their details with you asks to be removed, delete their contact record. If they contact us directly, we'll help them reach you or handle the request as the privacy policy describes.

Static QR codes and barcodes keep working forever, because the data lives in the code itself. Dynamic QR codes depend on CardDeck's redirect service, so before any plan change that affects them, CardDeck shows you exactly which codes will be affected and lets you choose which to keep active.

We build privacy into the product rather than bolting it on:

• Minimal by default. Cards show only the fields you choose to publish.
• No app required. Visitors open cards in their browser without creating an account or installing anything.
• Consent for contact sharing. Visitors decide what, if anything, to share back.
• Clear ownership. You control your card data and the contacts you capture; we process them to run the service.
• Respecting regional law. We design our practices with GDPR in the EU and UK and India's Digital Personal Data Protection Act, 2023 in mind.

CardDeck does not currently claim third-party security certifications. If your organization has a security questionnaire or procurement checklist, email sales@carddeck.co and we'll work through it with you.