Privacy
Two different people appear in this product: the person who owns the card, and the person who taps it. They are told different things and they have different rights, so this page treats them separately.
If you tapped someone’s card
Opening a tap page is anonymous. We record that a tap happened — which card, roughly when, and the counter value the chip sent — because a card that is being cloned shows up as a counter that goes backwards. That record is not linked to you.
You become identifiable only if you fill in the exchange form and tick a box. Then we store exactly what you typed, the channels you ticked, and the evidence described in consent and withdrawal.
- Collected
- Name, and whichever of email, phone, company and note you filled in.
- Why
- To let the cardholder reply to you, on the channels you ticked and no others.
- Kept
- Until you withdraw, or until the cardholder deletes the lead. Consent rows survive deletion as evidence that the consent existed and was withdrawn.
- Never
- Sold, rented, or added to any list you did not tick a box for.
If you own a card
Your account holds what you put on your public profile, your materials, your leads and the messages sent on your behalf. Your profile is public by design — it is what a tap opens — so treat it the way you would treat a printed card.
Who else sees it
Only the processors it takes to run the product. Each one gets the minimum that makes it work: a messaging provider sees the message and the recipient’s number, not your pipeline; a model provider sees the drafting context, not your consent log.
- Hosting and database, inside the EU.
- Messaging: WhatsApp Business, Telegram, and an email sender.
- A language model provider, used only to draft. It is never asked whether a message may be sent — that answer comes from the policy gate.
Content retrieved for grounding — a lead’s website, an uploaded PDF — is fenced and labelled as data before a model sees it. It is never concatenated into instructions.
Your rights
- Access: ask what is held about you and receive it in a readable export.
- Rectification: correct anything wrong.
- Erasure: have it removed, subject to the consent evidence noted above.
- Objection and withdrawal: stop messages on any channel, at any time, without giving a reason.
A withdrawal is applied when a message is about to be sent, not when it was drafted. A draft written before you withdrew still does not go out.
Cookies
The tap page sets none. The marketing site stores one thing in your browser: the colour theme you picked, under the key hologram-theme. It never leaves your device.