Cync Cards privacy notice

Last updated: 20 October 2026

Who we are and scope

cyncidentity operates Cync Cards. Contact support@cyncidentity.com about privacy, your information or complaints. This notice covers the standalone card service, its visitors and contact exchanges. Employee records, institutional onboarding and other organisation workspace features have separate purposes and are outside this notice.

Information collected and why

• Account information: your name, email, protected password credentials and session records, used to create, authenticate, secure and support your account and send password-reset messages.
• Card content: names, job titles, companies, biographies, phone numbers, emails, addresses, websites, social links, photos and logos that you choose to add, used to publish your card and generate QR codes and downloadable contacts.
• Contact exchanges: a visitor’s name, phone or email, optional company and message, and submission time, used to deliver that visitor’s details to the selected card owner.
• Usage and security information: card-view, contact-save and exchange events and their times, used for card statistics and abuse prevention. Hosting and delivery services may process technical request information such as IP addresses and browser details to deliver and protect the service.
• Support communications: information you send us, used to respond and resolve requests.

Only provide information needed for a business contact. Do not upload identity documents, financial account details, health information or other sensitive personal information.

Public cards and private exchanges

A live card and its images are public to anyone with its link or QR code. Visitors can download, copy and share those details. A no-index instruction asks search engines not to index the card; it cannot guarantee secrecy. Pausing or deleting a card cannot recall downloaded contacts, screenshots or other people’s copies.

Exchange submissions are not displayed on the public card. They are available to its owner, who can export them. cyncidentity and the providers operating the service process these submissions to deliver and protect the exchange. Platform administrators can review account information, public cards and usage totals for support and abuse management; the card administration dashboard does not expose exchange details.

Purposes and legal grounds

Where applicable law requires a legal basis, account and card operations are necessary to provide the service you request; security, proportionate usage statistics and abuse prevention serve legitimate interests, subject to your rights; and legally required processing follows applicable obligations. Voluntary contact exchanges are processed at your request to share details with the selected owner. Where consent is legally required for an activity, it must be obtained for that activity. Creating an account is not blanket consent to unrelated marketing.

Who receives information

Information is shared as you direct through publishing a card or submitting an exchange. Operational providers support hosting (Render), database storage (Neon), image storage (Cloudflare R2) and configured email delivery (Resend). Their involvement depends on the feature used and service configuration. Information may also be disclosed where required by law or necessary to investigate abuse and protect rights. We do not offer card or exchange information for sale or use it for cross-site advertising. Links to social networks, maps and other sites take you to services governed by their own notices.

Card owners’ responsibilities

When you receive an exchange, you are responsible for your subsequent use, storage and sharing of it and for any notices or lawful grounds your activities require. A contact exchange does not automatically authorise mailing-list subscriptions, bulk marketing or onward disclosure. Honour applicable marketing rules and deletion or objection requests.

International processing

Our operational providers may process information in countries other than yours, where privacy laws may differ. Ask support for current processing locations and information about applicable transfer arrangements. Where law requires a transfer safeguard, such as an adequacy decision or contractual protection, that requirement must be met. This notice does not certify that any particular transfer mechanism or local hosting arrangement is in place.

Retention and deletion

Account and card records are held while needed to operate the service. You can delete individual cards and received contacts in the card manager. Deleting a card removes its associated contacts and statistics from the application. Request account deletion or help with other records through support. Image objects, cached copies, backups, security records and audit records may remain after deletion from the application; immediate erasure of all copies is not provided. We assess remaining records against operational needs and legal obligations. Contact support for the retention information relevant to your request.

Your choices and privacy rights

You can edit, pause or delete your cards, delete received contacts and sign out. Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction, objection, withdrawal of consent where relied upon, or information about recipients and transfers. Email support with the request and the account email or relevant card link. Do not send passwords or identity documents in your first message. We may need proportionate verification and will respond within applicable legal time limits. Exceptions may apply, and we will explain a refusal. You may complain to your local data protection authority. Where California privacy law applies, applicable access, correction, deletion and non-discrimination rights are available; we do not sell information or share it for cross-context behavioural advertising.

For information held by a card owner after an exchange, contact that owner using their card details; support can also help identify the relevant exchange. We cannot erase copies independently downloaded by other people.

Security, children and changes

Controls include protected password credentials, secure session cookies, account access restrictions and restricted database access. No online service can guarantee absolute security. Report suspected misuse or a data incident to support; applicable breach assessment and notification duties remain in force. Cync Cards is intended for professional use and is not directed at children. Contact support if a child’s information has been submitted. Updates will be dated on this page; material changes will be communicated as required by applicable law.