Privacy notice

Last updated: [date]

Who we are

Rediscover Cards is operated by [Rediscover Studio legal name], [registered address, Mauritius], registered with the Data Protection Office as [registration number, if applicable]. Contact: [email protected].

What we collect, and why

• Card holders: login email, the details you choose to publish on your card (name, role, company, phone, email, address, social links, photo, logo, cover image), and basic usage such as view counts. Used to provide the service.
• Visitors: we don’t collect your contact details and don’t use advertising or tracking cookies. To count card views without counting anyone twice, we briefly keep a one-way scrambled version of your internet address (about one hour). Login uses your browser’s local storage only to keep you signed in.

Who processes the data

• Supabase (database and login), region: [EU region you chose].
• Cloudflare (website hosting and image storage).
• [Email provider, e.g. Resend or Brevo] (sign-in and invitation emails).

Each provider acts on our instructions under a data processing agreement. Some providers may process data outside Mauritius under appropriate safeguards.

How long we keep it

Card details are kept while the card exists and are deleted with it. Deleted images disappear from our caches within 24 hours.

Your rights

You can ask to access, correct or delete your data by emailing [email protected]. Card holders can download their data and delete their account from Account & security in the dashboard. You may also complain to the Data Protection Office of Mauritius.

Security

Data is encrypted in transit and at rest. Access is restricted by database rules so that each person and company only sees their own data. Company administrators must use two-step login.