Welcome to Scan2Lead ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and backend services.
1. Information We Collect
We collect information to provide a better scanning and contact-management experience for our users:
- Account Information: When you register an account, we collect your name, email address, and a hashed password (if signing up via email). If registering via Google OAuth, we collect your basic profile details (name, email, profile picture) and authentication tokens.
- Scanned Card Data: When you scan business cards using the app, our backend processes the card image via Optical Character Recognition (OCR) to extract contact details such as name, job title, company, phone number, email address, physical address, and website URLs.
- Uploaded Images: The raw and processed business card images you capture or upload are stored securely in our storage system to display them in your card wallet.
- Google Contacts Permissions: If you use our Google Contacts sync feature, the app requests access to read and write contacts in your Google Account. We use this scope solely to export scanned cards to your contact list.
2. How We Use Your Information
We use the collected information for the following purposes:
- To create and manage your user account.
- To process and extract contact information from scanned business cards using AI OCR.
- To enable syncing and creation of contacts directly inside your Google Contacts list.
- To maintain your secure digital business card wallet.
- To offer settings management, account deactivation, and permanent data deletion.
3. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data or contact details with third parties under any circumstances. All data transmission occurs securely over encrypted HTTPS connections. Your Google Contacts API access tokens are stored securely and are only used for direct communication with the official Google APIs for contact syncing.
4. Data Retention & Deletion Rights
We retain your data for as long as your account is active. You have full control over your data:
- In-App Deletion: You can permanently delete your account and all associated scanned card documents/images directly through the "Delete Account" button in the settings screen.
- Web-Based Deletion: You can also request deletion at any time by visiting our online deletion portal at /delete-account.
- Immediate Destruction: Upon account deletion, your profile record, Google tokens, and all uploaded card images are immediately and permanently erased from our databases and storage.
5. Security of Your Data
We implement robust industry-standard technical and organizational security measures to protect your personal data from unauthorized access, modification, or disclosure. However, no electronic transmission over the internet or storage technology can be guaranteed 100% secure.
6. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
7. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: