Privacy Policy

Who we are

VeenCard operates the website veencard.com. References to "we", "us", or "VeenCard" mean the operator of this service. Our contact address for privacy matters is privacy@veencard.com.

What data we collect

We collect the following personal data when you create an account or use our service:

• Name and email address (provided at registration)
• Password (stored as a one-way bcrypt hash, never in plain text)
• Your chosen card handle and the content you add to your card
• Technical data: IP address, browser type, and access timestamps (held in server logs for up to 30 days)
• Session identifiers stored in a secure, httpOnly cookie

How we use your data

We use your data only to provide and improve the VeenCard service. Specifically:

• To create and authenticate your account
• To send the email verification link required to activate your account
• To display your digital business card at your chosen URL
• To process payments and manage your subscription (via Stripe, when payment is enabled)
• To respond to support requests

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

Legal basis (UK GDPR)

We process your data under the following bases: contract performance (to provide the service you signed up for), legal obligation (for fraud prevention and compliance), and legitimate interest (for service security and abuse prevention). Where we rely on consent, you may withdraw it at any time.

Cookies

We use one strictly necessary cookie to maintain your login session. It is an httpOnly, Secure, SameSite=Strict cookie and does not track you across other websites. We do not use advertising or analytics cookies.

Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days except where we are required by law to retain records.

Your rights

Under UK GDPR you have the right to access, correct, or erase your personal data, to object to or restrict processing, and to data portability. To exercise any right, email privacy@veencard.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

Third-party processors

We use Stripe for payment processing (when payments are enabled). Stripe acts as a data processor under a data processing agreement. We also use our server infrastructure provider for hosting. No data is transferred outside the UK or EEA without appropriate safeguards.

Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy: privacy@veencard.com