Privacy Policy

1. Introduction & Scope

At SnapLinkr, we prioritize your data autonomy. We design products to help you network securely. This policy covers our globally accessible web applications, dynamic QR codes, physical NFC cards, visitor-facing capture tools, and our iOS & Android mobile applications.

By registering a SnapLinkr profile, ordering a customized physical card, or using our OCR card scanning tools, you acknowledge the terms outlined in this Privacy Policy. If you do not agree with these principles, please refrain from using our ecosystem.

2. Personal Data We Collect

We collect personal information directly provided by you, automatically through device transactions, and in cooperation with visitor-facing interactions:

• Account & Registration Details: Full Name, email address, password hashes, telephone numbers, and corporate designations.
• Identity & Social Authentication: Sign in with Apple, Google Sign-In, and Microsoft Azure AD OAuth tokens and profile identifiers provided with your explicit authorization.
• Profile Customization Attributes: Custom hex colors, selected typeface configurations, avatar graphics, banners, bio descriptions, location address grids, and linked social media handles.
• Transactional & Shipping Info: Full name, physical billing/shipping address, and virtual transaction tokens (handled exclusively by fully integrated, PCI-compliant third-party processors).
• Lead Capture & Visitor Data: Data submitted by prospective clients or leads directly into your dynamic SnapLinkr profile forms (including names, emails, and notes).

3. Business Card Scanner, OCR & Mobile Device Permissions

Our mobile applications contain a high-performance Paper Business Card Scanner powered by on-device Optical Character Recognition (OCR) technology. This tool converts photo coordinates from paper cards into editable digital contact coordinates instantly.

To enable core functionality, our iOS and Android mobile applications request specific device permissions strictly with user consent:

• Camera Access (NSCameraUsageDescription): Used exclusively to photograph physical business cards for on-device OCR text extraction and to capture profile photos.
• Photo Library Access (NSPhotoLibraryUsageDescription): Used when you choose to import an existing business card photo from your device gallery or upload custom profile pictures.
• Contacts Access (NSContactsUsageDescription): Used solely when you explicitly tap "Save to Contacts" to export an extracted lead into your device address book. We never harvest, sync, or upload your existing address book contacts.
• Location Access (NSLocationWhenInUseUsageDescription): Used only while actively using the app to optionally tag the meeting place, conference, or venue where a business lead is scanned.
• Microphone (NSMicrophoneUsageDescription): SnapLinkr does not record, store, or transmit audio. Microphone permission is optional and only initiated by standard camera preview sessions.

4. NFC Technology & Dynamic Profile Handshakes

SnapLinkr physical cards utilize Near-Field Communication (NFC) protocols. When tapped against a target smartphone, the card initiates a passive electromagnetic signal that requests the target device to open a static URL representing your dynamic profile page. This dynamic routing is designed with the following security features:

• Zero Device Intrusion: NFC handshakes do not install any applications, tracking pixels, or cookies on the target device natively.
• No Hidden Transmissions: Our physical chips contain only a redirect URL link and do not store any background personal data of the cardholder or target device.
• Secure Redirection: All profile pages use secure dynamic sockets (HTTPS with TLS 1.3 encryption) to prevent man-in-the-middle exploits during a real-life physical handshake.

5. How We Process & Protect Data

We process your data to maintain our networking services, custom dynamic profile interfaces, simulated laser-engraving reviews, and order fulfillment. We use advanced technical architectures to guarantee security:

• End-to-End Encryption: All personal databases are encrypted using AES-256 encryption. In-transit data utilizes HTTPS TLS 1.3 protocol layers.
• Payment Information: Payments for subscriptions or custom NFC cards are handled securely through PCI-DSS certified payment processors. SnapLinkr never stores or accesses raw credit card numbers.
• Data Retention: We retain your account data for as long as your profile remains active. When you delete your account, your data is expunged according to our strict retention and deletion protocols.

6. In-App Account & Data Deletion (Apple Guideline 5.1.1v)

In accordance with Apple App Store Review Guideline 5.1.1(v) and global privacy mandates, SnapLinkr provides a simple, self-serve mechanism to delete your account and all associated personal records:

Upon confirming account deletion:

• Your authentication session and tokens are immediately revoked.
• All personal profiles, digital business cards, dynamic QR codes, scanned lead databases, and contact records are permanently erased from our active databases.
• Associated cloud assets (such as profile avatars and uploaded graphics) are permanently wiped from our storage servers within 30 days.
• You may also submit an account and data erasure request at any time by contacting our privacy team at support@bwjts.com.

7. Cookie-less Privacy-First Analytics Engine

SnapLinkr tracks profile engagement without using invasive third-party tracking cookies or collecting device GPS coordinates. Our analytics engine is built for strict privacy compliance with DPDP Act, GDPR, and CCPA:

• First-Party Session Identity Hashing (SHA-256): Visitor identification is computed on the fly using a one-way cryptographic SHA-256 hash that expires automatically, eliminating persistent cross-site tracking.
• AES-256 Encrypted IP Storage: All IP addresses stored for telemetry and security audit logs are encrypted using hardware-grade AES-256, ensuring raw network coordinates are never exposed.
• Automatic Session Deduplication: Rapid repeated taps are deduplicated by session hashes to prevent spam clicks without harvesting visitor personal data.
• Zero Third-Party Ad Pixels: We never inject marketing pixels or sell visitor tracking logs to third-party ad networks.

8. Global Compliance Disclosures

We satisfy the strict privacy standards mandated across multiple international jurisdictions:

• Apple App Store & Google Play Compliance: Clear on-device permissions declarations, transparent usage explanations, and self-serve in-app account deletion.
• GDPR Compliance (EEA Citizens): Under the European General Data Protection Regulation, we act as a Data Controller. You hold the rights of access, erasure (right to be forgotten), rectification, data portability, and processing limitations.
• CCPA & CPRA Compliance (California, USA): We do not sell or share your personal data to third-party data brokers. You hold the right to know what data is collected, delete your records, and opt-out of data collection without discrimination.
• LGPD (Brazil) & PIPEDA (Canada): We operate on the legal basis of clear consent, providing transparent data deletion portals and ensuring appropriate protection steps during cross-border transfers.
• Australian Privacy Principles (APPs): We treat personal data with strict confidence, offering simple complaint procedures and direct data download options.

9. Digital Personal Data Protection (DPDP) Act 2026 (India)

As our core platform is developed and maintained in India under BWJ Tech Solutions Private Limited, we adhere to the Digital Personal Data Protection (DPDP) Act rules. Under the DPDP framework:

• Data Fiduciary Role: SnapLinkr acts as the Data Fiduciary, and you are the Data Principal. We process personal data solely for specified, lawful, and consented networking goals.
• Consent Portability & Consent Managers: You hold the right to give, manage, and withdraw your consent at any time. We support integrations with registered Consent Managers as they become operational.
• Right to Erasure & Correction: You can directly edit or permanently request deletion of all dynamic profile parameters through your personal account settings dashboard.
• Grievance Redressal: We maintain a dedicated Grievance Redressal Officer to address complaints, questions, or processing issues within the statutory timeline.

10. Your Rights, Data Portability & Redressal Officer

To exercise your rights (under DPDP, GDPR, CCPA, or local frameworks) or to raise queries regarding data encryption protocols, contact us:

We process all verification requests and complete deletion/portability claims within 30 days. No financial charges are ever applied for exercising your legal data protection rights.