Privacy Policy

We collect information you provide directly when you:

• Create an account — full name, company name, email address, and password.
• Build a page — contact details you choose to publish: phone number, email, website, address, job title, social media handles, a photo, and a bio.
• Make a payment — M-Pesa phone number used to initiate a payment. We do not store card numbers or M-Pesa PINs.
• Contact us — any information you include in support enquiries.

We also collect limited technical data automatically, including your IP address, browser type, and pages visited, for security and analytics purposes.

Page analytics — We collect aggregate, anonymous statistics about page activity — such as view and save counts, approximate country, and device type. We do not store the IP addresses or any personal information of people who view your pages.

We use the information we collect to:

• Create and manage your account and your Ovicard pages.
• Generate and serve your public contact page and QR code.
• Process payments and manage your subscription.
• Send transactional emails (account confirmation, billing receipts, password reset).
• Improve and secure the service.
• Respond to your support requests.

We do not sell your personal data to third parties, and we do not use it for advertising.

Any information you add to your Ovicard page (name, photo, phone, email, social links, etc.) is published publicly at your unique URL and encoded into your QR code. You are responsible for deciding what contact details you make public. Do not publish information you are not authorised to share.

When your subscription lapses, your public page continues to be served. If your account is permanently deactivated, your public page will be taken down.

We share your information only in the following limited circumstances:

• Service providers — we use Supabase for database hosting and file storage, and Vercel for application hosting. These providers process data on our behalf and are contractually bound to keep it secure.
• Payment processor — M-Pesa payments are processed by Intasend. We share only the information necessary to complete the transaction.
• Legal requirements — we may disclose information if required by law or to protect the rights, property, or safety of Ovicard, our users, or others.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required by law to retain it longer (for example, payment records).

We use industry-standard security measures including encrypted storage, HTTPS-only access, and access controls. However, no system is completely secure, and we cannot guarantee the absolute security of your data.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to certain processing.
• Export your data in a portable format.

To exercise any of these rights, contact us at contact@ovicard.com.

Ovicard uses a small number of strictly necessary cookies to keep you logged in and to maintain session security. We do not use advertising or tracking cookies.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: contact@ovicard.com