Privacy Policy - CardToCRM

1. Who We Are

CardToCRM is operated by Voittaa Ltd, a company registered in England and Wales. If you have any questions about this policy or your data, please contact us at support@voittaa.co.uk.

2. What Data We Collect

Account Information

When you register we collect your name, email address, and a password (which is stored in hashed form only).

Business Card Images and Extracted Data

When you scan a business card, we collect the photograph(s) you take and extract the following contact details from them:

Name and salutation
Email address and phone number
Company name and job title
Postal address

Card images are stored securely on our servers and used solely for the purpose of extracting contact information.

Purchase Information

Credit pack purchases are processed by Apple (App Store) or Google (Google Play). We do not collect or store your payment card details. We receive a purchase confirmation and the number of credits to add to your account.

Usage Data

We maintain records of your credit balance, scan history, and CRM push status to provide the service.

3. How We Use Your Data

We use your data to:

Provide the card scanning and contact extraction service
Push extracted contacts to your connected CRM system at your request
Manage your account and credit balance
Process purchases and provide customer support

We do not use your data for advertising, profiling, or any purpose unrelated to delivering the CardToCRM service.

4. Third-Party Services

We use the following third-party services to operate CardToCRM:

Anthropic (Claude AI)

Business card images are sent to Anthropic's API for text extraction and contact parsing. Anthropic processes images in accordance with their privacy policy. Images sent via the API are not used to train their models.

RevenueCat

We use RevenueCat to manage in-app purchases and credit entitlements. RevenueCat receives a pseudonymous user identifier and purchase events. See their privacy policy.

Spotler CRM (or other connected CRM)

When you connect a CRM and push a contact, the extracted contact data is sent to your CRM provider using credentials you supply. We act as an intermediary; the data is then governed by your CRM provider's terms and privacy policy.

Apple App Store / Google Play

App distribution and payment processing are handled by Apple and Google respectively. Their privacy policies govern any data they collect during the purchase process.

5. Device Permissions

CardToCRM requests the following device permissions:

Camera — Required to photograph business cards for scanning. Images are only captured when you actively take a photo.

We do not access your photo library, contacts, location, or any other device data.

6. Data Storage and Security

Your data is stored on servers located in the United Kingdom. We use industry-standard security measures including:

Encrypted connections (HTTPS/TLS) for all data in transit
Hashed passwords (bcrypt)
Token-based API authentication
Access-controlled server infrastructure

7. Data Retention

Your account data and scan history are retained for as long as your account is active. Business card images are retained to allow you to review past scans. If you wish to have your account and all associated data deleted, please contact us at support@voittaa.co.uk.

8. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

Access the personal data we hold about you
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict or object to processing
Data portability — receive your data in a structured format

To exercise any of these rights, contact us at support@voittaa.co.uk. We will respond within 30 days.

9. Children's Privacy

CardToCRM is not intended for use by anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or email. The "last updated" date at the top of this page indicates when the policy was most recently revised.

11. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your personal data, contact us at:

Voittaa Ltd
Email: support@voittaa.co.uk
Website: voittaa.co.uk