Privacy Policy

1. Introduction

Welcome to Network Buddy. We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business card scanning and contact management application.

By using Network Buddy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Business Card Data: Images of business cards you scan and the extracted information (names, phone numbers, email addresses, companies, job titles)
• Contact Information: Additional notes, tags, and information you add to your contacts
• Payment Information: Billing details processed securely through Stripe (we do not store your credit card information)

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, features used, time spent on the app, and interaction patterns
• Location Data: Approximate location based on IP address (we do not collect precise GPS location)

2.3 Information from Third Parties

• OAuth Providers: When you sign in with Google or Apple, we receive your name and email address
• Contact Enrichment: We may retrieve publicly available information about your contacts from LinkedIn, company databases, and news sources to enhance contact profiles

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our business card scanning and contact management services
• Process and extract text from business card images using optical character recognition (OCR)
• Enrich contact profiles with publicly available professional information
• Generate AI-powered conversation starters and insights about your contacts
• Process payments and manage subscriptions
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve our service and develop new features
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our Terms of Service

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We work with third-party service providers to help us operate our business:

• Supabase: Database hosting and authentication services
• OpenAI: AI-powered OCR and text analysis
• Vercel: Application hosting and deployment
• Stripe: Payment processing (PCI-DSS compliant)

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Row-Level Security (RLS) policies in our database to ensure users can only access their own data
• Regular security assessments and updates
• Restricted access to personal information to authorized personnel only

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and review your information through your account settings
• Correction: You can update or correct your information at any time
• Deletion: You can request deletion of your account and associated data
• Data Portability: You can export your contact data in a structured format
• Opt-Out: You can opt out of marketing communications at any time
• Revoke Consent: You can revoke consent for data processing where we rely on consent as the legal basis

To exercise these rights, please contact us at dave@ilift.com or through your account settings.

8. Children's Privacy

Network Buddy is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Network Buddy, you consent to the transfer of your information to the United States and other countries where our service providers operate.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: