Contact exchange
A visitor must consent before sharing their details with the card owner. Owners are responsible for lawful use of received leads.
Privacy policy — operator review required
Engagement data
Optional engagement events are recorded after consent. The implementation does not store raw IP addresses or precise geolocation in card events.
Provider processing
Email, SMS, payments, storage, wallet, CRM and AI services process data when configured. The operator must identify their providers and international transfer rules here before launch.
Retention and rights
Default raw event retention is 90 days and exports expire after two days. Account deletion uses a seven-day delay and anonymises account data while financial and security records remain subject to approved retention requirements.
Operator details
The legal operator name, address, privacy contact, jurisdiction and lawful bases must be supplied before commercial deployment.