Your data and GDPR

This page says, in plain terms, what VoltCards holds about you, why, who handles it for us, how long we keep it, and how you can see it, take it with you or remove it. We handle personal data under the EU General Data Protection Regulation (GDPR) and North Macedonia's Law on Personal Data Protection, which follows it. The Privacy Policy is the full document; this is the short version of the parts people ask about.

Who is responsible for your data

VORTEK INOVATIONS D.O.O., Njudelhiska 6/1-13, Karposh, Skopje, North Macedonia, which runs VoltCards. Write to hey@volt.cards about anything on this page.

When a company gives its people VoltCards cards, the company decides what happens to its team's cards and the leads they collect, and we handle that data for the company under our Data processing agreement.

What we hold

• Your account: your name, email address, username and password (stored only as a hash), when you agreed to our terms, and the devices you signed in from, so we can tell you about a sign-in you did not make.
• Your card: what you put on it: your title, company, photo, banner, links and contact details. Your card is public at its address, because that is what a business card is for. You can hide it at any time.
• Your contacts: people who sent you their details through your card's exchange form, cards you saved, and contacts you added, scanned or imported, with the notes, tags and reminders you add to them.
• Where you met a contact, if you turn it on: a place rounded to about 100 metres, or the town estimated from the sender's connection. See section 3.4 of the Privacy Policy.
• Statistics: views of your card and taps on its links, so you can see how your card is used.
• Billing, if you pay: your plan, your invoices and the record of each payment. We never see or store your full card number: the bank holds it.
• The Business contact form, if you send it: your name, email address and company, and the phone number, team size and message if you give them. You do not need an account to send it.

Why we hold it

• To provide the service you signed up for: your account, your card, your contacts and, if you pay, your plan and its billing. This is the contract between us.
• Because you asked us to: push notifications, pinning where you met a contact, and adding your card to a wallet. Each is off until you turn it on, and you can turn it off at any time.
• To keep the service safe and working: sign-in records, limits on how often things can be tried, and the technical logs we read when something breaks. This is our legitimate interest in running a secure service.
• Because the law requires it: invoices and payment records, which accounting and tax law require us to keep.

We do not sell your data, and we do not use it for advertising.

Who handles it for us

We use these services to run VoltCards, and each receives only what its job needs:

• DigitalOcean: hosts the service and its database, and stores the images you upload.
• Halkbank: processes card payments for paid plans.
• Microsoft (Office 365): delivers the emails we send you.
• Google Firebase: delivers push notifications to the VoltCards app, if you allow them. When you send the Business contact form, it also tells our staff your name and company.
• Google Maps: names the town of a pinned place and draws the contact map. See section 3.4 of the Privacy Policy.
• Apple and Google: issue your wallet pass if you add your card to Apple Wallet or Google Wallet, and sign you in if you choose Sign in with Apple or Google.
• Anthropic: reads the photo of a paper business card when you scan one, and searches the web for a contact when you choose "Find details online". Neither the photo nor what was found is kept unless you save it. See sections 3.3 and 3.5 of the Privacy Policy.
• HubSpot and Zapier, only if you connect them: receive the contacts and leads you choose to send them. See section 3.6 of the Privacy Policy.

Some of these services are based outside North Macedonia and the European Union, in the United States among other places. Where your data goes there, it goes under the safeguards those providers offer for it, such as the EU Standard Contractual Clauses.

How long we keep it

• Your account, your card and your contacts: until you delete them, or your account.
• A contact's notes, tags, reminders and the place you met them: until you delete that contact.
• Invoices and payment records: for as long as accounting and tax law requires, even after an account is deleted. They keep the billing name, address and email they were issued to.
• Records of scans and lookups: a count, with no photo and no contact details, kept with your account to apply your plan's monthly allowance.
• A Business contact form message: until you ask us to delete it.

Your rights, and how to use them

Under the GDPR you can ask to see, correct, delete or take with you the data we hold about you, to restrict or object to how we use it, and to withdraw a consent you gave. Most of this you can do yourself in the app:

• See and correct: everything on your card and in your account is editable in the app.
• Take it with you: every contact can be saved from the app as a contact card (vCard), one at a time, on any plan. Exporting the whole contact book in one file (CSV, or one vCard holding every contact) is part of the paid plans.
• Delete: you can delete your account from the app's menu. Deleting removes your account, all of your cards (a company card included), your contacts and everything attached to them, your statistics and any paid plan, and signs you out everywhere. We email you to confirm it. Invoices and payment records are kept, as the law requires. A company keeps its own copy of the leads collected through its cards. If you are the last manager of a company, make someone else a manager first, and if you pay for a company's plan, write to us to move or end it first. An account with orders from the earlier VoltCards shop cannot be deleted automatically; write to us and we will do it. A message you sent through the Business contact form is kept separately and is not removed with your account; write to us and we will delete it.
• Anything else, including a full copy of what we hold about you: write to hey@volt.cards. We answer within one month.

If you sent your details to somebody through their VoltCards card, those details are in that person's contact book, and they decide what happens to them. Ask them first. If they do not answer, write to us.

You can also complain to the Personal Data Protection Agency of North Macedonia (azlp.mk), or to the data protection authority where you live in the European Union. We would like the chance to put things right first, so please write to us too.

Keeping it safe

The service is only reachable over an encrypted connection. Passwords are stored only as hashes, card numbers stay with the bank, and the keys we hold for other services are stored encrypted. If a breach puts your data at risk, we will tell the authority and, where the law requires it, you.

Cookies

This website sets no cookies and runs no analytics. The VoltCards app sets a cookie that keeps you signed in, and a short-lived one while a Sign in with Apple or Google is completing. The Cookie policy lists each one, and what the app keeps in your device's own storage.