CardToDeal Privacy Policy

1. Who we are

CardToDeal is a free business card scanner operated by Quiamo Digital Market Services LLP ("Quiamo", "we", "our"), a limited liability partnership registered in India at Padmavati Hills, Pune, Maharashtra 411009. You can reach our data protection contact at hello@cardtodeal.com or on +91 90216 02686.

This CardToDeal privacy policy explains what data we collect when you use cardtodeal.com, how we use it, and the rights you have over it. Quiamo also operates VynDeal CRM, which carries its own separate privacy policy.

2. What we collect

2.1 Scanned card images

When you upload a card image, that image is transmitted to our servers, processed by a smart extraction pipeline, and the extracted contact fields are returned to your browser. We do not persist the card image or extracted fields on our servers unless you explicitly export to VynDeal CRM.

2.2 Usage data

We log standard request data (IP address, timestamp, user agent, referrer, page path) to operate the service, detect abuse and meet our daily-limit fairness obligations. This data is retained for 30 days.

2.3 Cookies

CardToDeal sets a minimal first-party cookie to track your daily scan count. We do not set third-party tracking cookies on the scan page. Optional analytics cookies fire only with your consent. See our cookie policy for full details.

3. Legal basis (GDPR)

Under GDPR Article 6(1)(a), we process your card scan data on the basis of your consent — by uploading a card to CardToDeal, you provide that consent. You may withdraw it at any time by closing the browser tab; data already processed and returned to your browser is outside our control.

For service-operation logs we rely on GDPR Article 6(1)(f) (legitimate interests) to ensure security and prevent abuse.

4. Card scanner data privacy — what we never do

• We do not sell scanned contact data to third parties.
• We do not train external AI models on scanned cards, outside CardToDeal's own service operation.
• We do not retain card images after the scan returns. They are deleted from working memory at request end.
• We do not contact the people on the cards you scan unless you explicitly route them through VynDeal CRM, which has its own privacy policy.

5. Analytics, advertising & marketing data

To understand how people find and use CardToDeal, and to fund the free tool, we use a set of analytics, advertising and marketing technologies. These run on by default under Google Consent Mode v2, and you can opt out at any time (see "Your right to opt out" below). The data involved is about site usage and visitor sources — not the contents of cards you scan, which we never use for advertising.

We collect or may collect and process the following beyond the basic usage data described above:

• Google Analytics 4 (GA4) — measures page views, events, approximate (city-level) location, and device/browser information, with IP anonymisation. Property ID G-B5MVE5VMEZ.
• Google Ads — conversion measurement and remarketing audiences, so we can see which campaigns lead to scans and reach relevant visitors.
• Google Search Console — aggregated search queries, impressions and clicks that bring users to the site from Google Search.
• LinkedIn (Insight Tag / LinkedIn Ads) — campaign performance measurement and professional-audience insights.
• Campaign & referral parameters — UTM tags (utm_source / utm_medium / utm_campaign), referrer, and landing page, to attribute which channel or campaign brought a visitor.
• AI-based enhancements — we may use AI and automated processing to improve OCR accuracy, lead quality, content relevance and advertising / audience insights; where feasible this uses aggregated or pseudonymised data.

Legal basis. Depending on your jurisdiction, we rely on your consent or on our legitimate interests (GDPR Article 6(1)(a) and 6(1)(f)) to operate analytics, advertising and marketing measurement, and on the corresponding lawful bases under India's Digital Personal Data Protection Act 2023. Because these technologies are on by default, we treat your continued use without opting out as the basis where consent is not separately required, and we give you a clear way to refuse.

Your right to opt out. You can switch analytics and advertising off at any time, and opting out does not affect essential site functionality. You can:

• Use the "Cookie settings" link in the footer — choosing "Essentials only" sets analytics and ad storage to "denied" via Consent Mode v2 and persists your choice.
• Use your browser cookie controls — block or clear cookies for this site at any time.
• Google Ads Settings — manage personalised advertising at adssettings.google.com.
• Google Analytics Opt-out Browser Add-on — stops GA4 measurement across sites.
• LinkedIn ad preferences — adjust ad and data settings in your LinkedIn account.

For the specific cookies involved, see our Cookie Policy; to exercise your right to object or withdraw consent more broadly, see Your data rights.

6. Your rights

Under GDPR and India's Digital Personal Data Protection Act 2023, you have rights of access, correction, deletion, portability and objection regarding any personal data we hold about you. Write to hello@cardtodeal.com to exercise any of these rights. We respond within 30 days. To object specifically to analytics and advertising, see Your data rights.

7. International transfers

CardToDeal's primary servers are in India. If usage is routed via a CDN edge node outside India, that transfer is covered by standard contractual clauses and our processor agreements.

8. Updates to this policy

We will update this GDPR card scanning policy from time to time. The effective date at the top of this page reflects the latest version. Material changes will be flagged on the homepage for at least 14 days. For related terms, see our Terms of Service and Cookie Policy.