Privacy Policy

OpdoCard ("Company", "we" or "our") is committed to protecting the privacy of your personal data. This Privacy Policy explains what data we collect when you use our website at opdocard.com and the OpdoCard digital business card platform, how we use it, and your rights.

1. Data Controller

2. Data We Collect

a) Account & Profile Data

• Name, surname, job title, company name
• Email address and password (encrypted)
• Profile photo (optional)
• Phone number, website, social media links

b) Usage & Analytics Data

• Digital card view counts and dates
• Link click statistics
• Visitor device type and browser info (anonymous)
• IP address (only for session fingerprinting, not stored)

c) Contact & Lead Data

• Name, email, phone optionally submitted by visitors to your card
• Event badge scan data

d) Technical Data

• Cookies and local storage data (see Cookie Policy)
• Session tokens (Supabase Auth)

3. How We Use Data

• Creating and managing your account
• Providing your digital business card profile
• Generating analytics dashboard and reports
• Sending automated follow-up emails/SMS (only when permitted)
• Security, fraud prevention and technical troubleshooting
• Fulfilling legal obligations

4. Data Sharing

OpdoCard does not sell your personal data. Limited sharing may occur in the following cases:

• Supabase — Database and authentication infrastructure (EU Data Protection compliant)
• Resend / Twilio — Automated follow-up email and SMS delivery (only necessary data transferred)
• Legal requirements — Sharing with authorities when required by court order or legal obligation

5. Data Retention

• Account data: Until account is closed
• Analytics data: 24 months
• Lead data: Until deleted by user
• Session logs: 90 days

6. Security

Your data is protected with AES-256 encryption and TLS 1.3 protocol. Supabase Row Level Security (RLS) policies ensure each user can only access their own data. Passwords are never stored in plain text.

7. Your Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise your rights, please contact us at info@opdocard.com. Requests will be answered within 30 days.

8. Policy Changes

We may update this policy from time to time. You will be notified of significant changes via email or an in-platform notification.

9. Contact