Cardello1. Information we collect
Account information includes your email address, account identifier, display name, language, time zone, sign-in provider identifiers, and records of your acceptance of the Terms. When you choose Google or Apple sign-in, that provider supplies the identity information you authorize, such as a name, email address, or Apple private relay address. We do not receive your Google or Apple password.
Card and workspace information includes the professional profile, contact details, links, images, showcase items, contacts, notes, tags, inquiries, and follow-up details you choose to save. If you upload information about another person, you must have an appropriate reason and authority to do so. We receive that person's information from you or, for an inquiry, directly from the sender.
Purchase information includes an app account identifier, store product and transaction identifiers, subscription status, expiration, and renewal information. Apple or Google handles payment details. Cardello does not collect your full payment card number. RevenueCat helps validate purchases and synchronize access to Pro.
Technical and support information includes request times, device or app information supplied with requests, security events, delivery and failure records, and messages you send to support. Network providers necessarily process IP addresses to deliver requests. The backend also uses pseudonymized network identifiers to limit abuse. If a feature uses notifications or a Wallet pass, it may process the relevant device token, installation identifier, pass identifier, and update registrations.
2. What is public
Your saved, shareable card fields and eligible showcase items can be viewed by anyone with their links or QR codes. Your public card can include contact details and images you choose to publish. Do not put information on a public card that you intend to keep confidential. A private sign-in email is not automatically published as a card contact email.
Private contacts, notes, account settings, purchase records, and inquiry inbox information are not published as part of your card. An inquiry's sender details and message are shared with the card owner so the owner can respond. That owner may handle the inquiry under their own privacy practices. Other people may save, forward, photograph, or download information you have shared; removing it from Cardello does not remove their independent copies.
3. How and why we use information
We use information to create and secure accounts, save and display cards, deliver inquiries, manage contacts and follow-ups, provide requested exports, validate subscription access, process deletion requests, and answer support requests. We also use limited technical information to prevent fraud, spam, unauthorized access, and service failures.
Where data protection law requires a legal basis, providing requested account and service features is based on performing our agreement with you. Security, abuse prevention, basic service measurement, and support rely on legitimate interests that we balance against your rights. Optional permissions and features rely on consent where required. We may also process information to meet legal obligations. You can withdraw consent for an optional feature without affecting prior lawful processing; the related feature may then stop working.
Cardello does not sell personal information, run third-party behavioral advertising, or use your private contacts and notes to train a general-purpose AI model. Uploaded images may be screened using automated content moderation to help protect the service. You can contact support to request review of a content restriction.
4. Service providers and other disclosures
Amazon Web Services provides the backend database, authentication, file storage, email delivery, security logging, and image moderation. The primary backend is configured in Frankfurt, Germany. Content delivery networks can serve public content from locations around the world. The public website uses OpenAI Sites and Cloudflare hosting and delivery infrastructure, which process network and request information to serve and protect the website.
Google and Apple process information when you choose their sign-in services or use their app stores. RevenueCat processes app account identifiers and purchase information for subscription management. When enabled and used, Apple or Google Wallet and mobile notification delivery services process information needed for those features. We share with service providers only as needed for their role; their own privacy notices also describe their independent processing.
We may disclose information when required by law, to respond to a valid legal process, to protect users and the service, or as part of a business transfer subject to appropriate protections. We do not provide your private workspace to other card owners merely because you interact with them.
5. Permissions, cookies, and local storage
Camera and photo access are used when you choose to scan a QR code, take a photo, or select an image. The app may request notification permission for requested notifications. You can change device permissions in system settings. Denying a permission affects the relevant feature rather than requiring unrelated data access.
The app stores authentication information in device secure storage and may keep local workspace or preference data to operate requested features. Websites and sign-in providers may use essential cookies or similar storage for authentication, security, and preferences. The public marketing and policy pages do not include advertising pixels or a third-party behavioral analytics script. Browser and hosting providers may still process the technical information needed to deliver the pages.
6. Retention and deletion
We keep account and workspace information while it is needed to provide your account and requested features. You can edit your card, remove content, request an export, or request account deletion. Account deletion deactivates public access and starts removal of the associated workspace, files, sign-in identities, and subscription profile, subject to identity checks and required provider revocation steps.
Current backend retention settings make original image uploads eligible for storage expiration after 2 days, generated export files after 1 day, routine application and access logs after 14 days, and completed job and delivery records after 31 days. Recovery records use 30-day storage lifecycle rules; backup plans retain recovery points for 14 days. Expiration and cleanup jobs are asynchronous, so these settings are not promises of deletion at an exact minute. A backup restored during its retention period must have deletions reapplied before returning to service.
Limited account identifiers, deletion or abuse-prevention records, email suppression records, transaction evidence, and information required for legal or dispute purposes may remain when reasonably necessary. Store payment records are controlled by Apple or Google. Previously downloaded contact files, Wallet copies, messages already delivered to another person, and other recipients' copies are outside our direct control. Deleting Cardello does not cancel an app-store subscription.
7. Your choices and rights
Email support@cardellopro.com to request access, correction, deletion, a portable copy, restriction, or to object to processing. Depending on your location, these rights can be subject to legal exceptions. You can also withdraw optional consent, manage app permissions, and change subscription renewal through the store that billed you. We may ask for information needed to verify your request, but never ask you to send a password or a one-time sign-in code.
If you do not have the app, use the instructions at cardellopro.com/delete-account to request deletion. If information about you was added by a card owner, you can contact that owner and Cardello support. Where applicable, you can complain to your local data protection authority and ask us about safeguards for international transfers.
For people covered by Turkey’s Personal Data Protection Law No. 6698 (KVKK), rights can include learning whether your data is processed, obtaining information about processing and recipients, requesting correction or erasure where the legal conditions are met, asking that relevant recipients be notified, objecting to an adverse result produced solely by automated analysis, and seeking compensation for unlawful processing where the law permits. You may send a verified request using the email address already registered to your Cardello account. You can also contact the Turkish Personal Data Protection Authority (KVKK) under its applicable complaint procedure.
8. International processing and security
Our providers may process information outside your country. Where applicable law requires safeguards for a transfer, we rely on appropriate contractual safeguards or another lawful transfer mechanism. Contact support for information about the safeguards relevant to your request.
We use controls including encrypted connections, restricted service roles, private storage for workspace files, and access checks. No service can guarantee absolute security. Keep access to your sign-in provider and device secure, and contact support if you suspect unauthorized use.
9. Age, changes, and contact
Cardello is intended for people aged 16 or older and is not directed to younger children. If you believe a child has provided personal information, contact support so we can investigate and take appropriate action.
We will update this policy when the service or our practices change and show the new effective date. We will provide additional notice or obtain consent where required for a material change. Privacy requests and questions can be sent to support@cardellopro.com; general inquiries can be sent to info@cardellopro.com.