Privacy Policy

Last updated: September 27, 2026

Privacy Policy

Last updated: September 27, 2026

Cardibiz AI ("we", "us", or "our") operates the Cardibiz AI mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Cardibiz AI, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

  • Name and Email Address: Used to create and manage your account.
  • Phone Number: Used for verification (e.g., car dealer verification) and contact facilitation.
  • Profile Details: Job title, company, industry, skills, bio, location, and profile/avatar images.
  • Business Card Data: Contact details extracted from scanned business cards via AI/OCR.

Financial Information

  • Payment Data: Processed by our third-party payment providers (Stripe, Paystack, NowPayments). We do not store full card numbers on our servers.
  • Payout Account Details: Payout method information (e.g., PayPal email, crypto wallet address, Stripe Connect account) for creators receiving earnings.
  • Transaction History: Records of purchases, subscriptions, payouts, and wallet balances.

User-Generated Content

  • Messages: Direct messages and forum posts you send within the Service.
  • Media: Photos, videos, and digital assets you upload (e.g., car listing photos, influencer visuals, business card images).
  • Collections and Listings: Business card collections, car listings, ideas, and creator content you publish.

App Activity

  • Search and Browsing History: Used to personalize recommendations and improve search relevance.
  • Interaction Data: Profile views, card views, engagement metrics, and connections.
  • Gamification Data: Points, badges, leaderboards, and challenge participation.

Device and Identifiers

  • Device Identifiers and Session Tokens: Used for authentication, security, session management, and fraud prevention.
  • Installation and Analytics Identifiers: Installation IDs and session identifiers transmitted with analytics events to understand app usage, monitor trends, and improve our Service.
  • IP Address Hashes: We hash visitor IP addresses (we do not store raw IPs) to enforce anonymous-usage quotas and detect abuse.
  • Push Notification Tokens: Device push tokens used to deliver push notifications to your mobile device.
  • Third-Party Platform User IDs: When you connect third-party accounts (Google, Facebook, Apple, TikTok, LinkedIn, Instagram), we may receive and store the platform-specific user IDs those providers assign to you, to enable integrations and linked features.

2. How We Use Your Information

  • Account Management: To create and maintain your account, authenticate you, and verify your identity.
  • App Functionality: To provide core features such as card scanning, networking, messaging, marketplace, events, mentorship, and creator tools.
  • Personalization: To deliver AI-powered recommendations, personalized feeds, and relevant matches.
  • Communication: To send you notifications, reminders, and support messages.
  • Payments and Payouts: To process transactions and distribute earnings to creators.
  • Analytics and Improvement: To analyze usage, monitor trends, and improve our Service.
  • Security and Moderation: To detect fraud, moderate content, and enforce our Terms of Service.
  • Legal Compliance: To meet legal, regulatory, and platform requirements.

3. Data Sharing

We do not sell your personal data. We may share your information with:

  • Service Providers: Payment processors (Stripe, Paystack, NowPayments), cloud hosting providers, and AI providers that help deliver our Service. Device identifiers, IP hashes, and analytics identifiers are shared with our cloud infrastructure and analytics providers as part of operating the Service.
  • Connected Platforms: When you link a third-party account (Google, Facebook, Apple, TikTok, LinkedIn, Instagram), your platform user ID and related identifiers are shared with that provider to maintain the connection and enable integrated features.
  • Other Users: Profile information, public collections, listings, and messages you choose to share.
  • Legal Authorities: When required by law or to protect our rights and the safety of others.

4. Data Security

All user data is encrypted in transit using industry-standard TLS/HTTPS protocols. Data at rest is protected by our cloud infrastructure provider's security measures. Payment information is tokenized and processed by certified PCI-compliant providers—we never store raw card numbers.

Access to personal data is restricted to authorized personnel and is governed by row-level security policies that ensure users can only access data they own or are explicitly permitted to view.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Transaction records may be retained longer as required for legal, accounting, or regulatory purposes.

6. Your Rights and Choices

Account Deletion

You have the right to request the deletion of your account and all associated personal data at any time.

How to request account deletion:

  1. Within the App (logged-in users): Open the navigation menu → tap your profile → select "Delete Account". Confirm by typing DELETE. Your account and associated data will be permanently removed within 30 days.
  2. Via this link: If you are unable to access the app, you can request deletion by signing in and using the in-app deletion tool, or by contacting us through the app's support channels.

When you delete your account, we remove:

  • Your profile and authentication records
  • All scanned business cards and contact data you own
  • Your company showcase and car dealer profiles
  • Your messages, connections, and forum posts
  • Your collections, listings, and digital assets
  • Your wallet, subscription, and payout records

Some anonymized or aggregated data may be retained for analytics and security purposes. Transaction records may be retained as required by law.

Data Control

  • You can update your profile information at any time.
  • You can manage privacy settings to control what is visible to others.
  • You can block other users from interacting with you.
  • You can export your data before deletion if needed.

7. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

8. Third-Party Services

Our Service integrates with third-party platforms including Google (Calendar, Gmail, Drive), Stripe, Paystack, NowPayments, LinkedIn, Instagram, and others. These services have their own privacy policies governing how they handle your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app or through other communication channels.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, or you wish to exercise any of your privacy rights, please contact us by email at privacycardibiz@gmail.com.

You can also reach us through the in-app support channels. We aim to respond to privacy enquiries within 30 days.