1. The rights you have
If you are in the EU, the UK or India, data-protection law gives you strong rights over your personal data. CardToDeal, operated by Quiamo Digital Market Services LLP, honours these rights under both the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act 2023 (DPDP Act). This guide explains each right and how we handle it. For the underlying detail, read it alongside our Privacy Policy.
2. Right of access
You can ask whether we hold personal data about you and, if so, get a copy of it together with information about how it is used. Because CardToDeal processes card images in memory and does not store them or the extracted fields after a scan, the main data we may hold about you is limited account information and short-lived request logs. We will confirm what we have and provide a copy on request.
3. Right of rectification
If any personal data we hold about you is inaccurate or incomplete, you can ask us to correct or complete it. For data extracted from a scanned card, accuracy is your responsibility to verify at the point of scanning — our Terms of Service explain the extraction accuracy disclaimer — but any account data we store can be corrected on request.
4. Right of erasure ("right to be forgotten")
You can ask us to delete personal data we hold about you. For card scans there is usually nothing to delete: images are processed in memory and not stored without your consent. Where you have created an account or exported contacts, we will delete the associated personal data on request, unless we are legally required to keep it. Operational request logs are in any case retained for only 30 days, consistent with our Privacy Policy, and then deleted automatically.
5. Right to restriction
You can ask us to limit how we use your personal data in certain circumstances — for example while we check the accuracy of data you have disputed. While a restriction is in place we will store the data but not otherwise process it, except as the law allows.
6. Right to data portability
For data you have provided to us and that we process by automated means on the basis of consent or a contract, you can ask for a copy in a structured, commonly used, machine-readable format, and ask us to transmit it to another provider where technically feasible. In practice the extracted contact data is already returned directly to your browser, and any contacts you export to a CRM are exported in a standard format you can take with you.
7. Right to object (including to ads and marketing)
You can object to processing based on our legitimate interests, and you have an absolute right to object to the use of your personal data for direct marketing at any time. CardToDeal does not use scanned card data for marketing. For advertising, we serve Google AdSense to keep the tool free, and any non-essential advertising cookies load only with your consent — see the cookie-preferences note below and our Cookie Policy.
8. Rights regarding automated decisions
You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you. CardToDeal's extraction pipeline only converts a card image into text — it does not make decisions about people and produces no such effects. The extracted fields are returned for you to review and use as you see fit.
9. How to exercise your rights
To exercise any of these rights, email hello@cardtodeal.com with a short description of your request. We may ask for information to verify your identity so we do not disclose data to the wrong person. We respond to data-rights requests within 30 days; where a request is complex we will tell you and explain any extension. There is no charge for a reasonable request. If you are a business customer for whom we act as processor, see our Data Processing Addendum for how requests are routed.
10. Cookie & ad preferences
You can change your consent for analytics and advertising cookies at any time using the "Cookie settings" link in the footer of any CardToDeal page, which reopens the consent banner. Choosing "Essential only" stops non-essential analytics and advertising scripts from running. Full detail is in our Cookie Policy.
Your data, your call
One email is all it takes — hello@cardtodeal.com — and we reply within 30 days. For the wider picture, read our Privacy Policy. CardToDeal and VynDeal are built by the studio behind Kunal Waghmare's GTM work.
Scan a card now — free Open your free VynDeal account →