Back to Home

Privacy Policy

Last updated: 7 May 2026

1. Who we are

Bcarda (bcarda.com) is operated by Bcarda, an unregistered trading name based in New Zealand. In this policy "we", "us", and "our" refer to Bcarda.

Bcarda is a digital business card platform. It lets you create shareable business cards, capture contacts at events, and manage your professional network.

2. What information we collect

We collect information in the following ways:

From Google or LinkedIn when you sign in:

  • Your name and email address — to identify your account.
  • Your profile picture URL — to display on your cards and profile.

We request only the basic profile and email scopes. We do not request access to your email inbox, contacts, calendar, or any other data held by Google or LinkedIn.

Information you provide directly:

  • Business card content — job title, company, phone number, social links, and any other fields you choose to add.
  • Contacts — names, notes, and details of people you connect with through Bcarda.
  • Events — event names, locations, and associated data you create or attend.
  • Profile photos or images you upload.

3. How we use your information

We use the information we collect solely to provide the Bcarda service to you:

  • Authenticate you and maintain your session.
  • Display your business cards to people you share them with.
  • Record and organise contacts you make through the platform.
  • Manage events you create or attend.

We will never use your data to serve advertisements, build profiles for third parties, or for any purpose other than providing the Bcarda service.

4. What we store and where

Your data is stored in the following systems:

  • Application database — hosted on Fly.io in the Asia-Pacific region. Stores your account information, card content, contacts, and events.
  • Object storage — profile photos and images are stored with Tigris, an S3-compatible object store operated by Fly.io.

5. Analytics

We use Plausible Analytics to understand how the website is used. Plausible does not use cookies, does not collect personal data, and does not track you across sites. Only aggregated, anonymous statistics are recorded (page views, referrers, device types). No individual user data is sent to Plausible.

6. Data sharing and third parties

We do not sell, rent, or share your personal information with any third party, including advertisers or data brokers.

We use the following service providers who process data on our behalf:

  • Fly.io — application hosting and database.
  • Tigris — image and file storage.
  • Plausible Analytics — anonymous website analytics (no personal data).
  • Google — OAuth sign-in.
  • LinkedIn — OAuth sign-in.

We may disclose information if required to do so by law or in response to a valid legal process in New Zealand.

7. Data retention and deletion

We retain your data for as long as your account is active. You can delete individual cards, contacts, and events yourself at any time from within the app. To delete your account and all associated data entirely, email us (see section 11) and we will process the request within 30 days.

You can revoke Bcarda's access to your Google or LinkedIn account at any time via your provider's account settings. Revoking access prevents future sign-ins but does not automatically delete data already stored — contact us to request full deletion.

8. Security

We take reasonable steps to protect your information. The application is served over HTTPS. Access to production systems is restricted to authorised personnel only.

No system is completely secure. If you become aware of any security issue, please contact us immediately.

9. Your rights under the NZ Privacy Act 2020

Under the New Zealand Privacy Act 2020, you have the right to:

  • Ask whether we hold personal information about you.
  • Request access to that information.
  • Request correction of any information that is inaccurate or misleading.

To exercise these rights, contact us at the address in section 11. We will respond within 20 working days as required by the Act.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of Bcarda after changes are posted constitutes acceptance of the revised policy.

11. Contact us

If you have any questions about this policy, or to request data access, correction, or deletion, please email: privacy@bcarda.com

Bcarda
New Zealand