Privacy

Draft — review with counsel before launch. Last updated September 2026.

What we collect from customers

Your name, email, shipping address, phone number, and the Google Business listing you connect your cards to. Payments are processed by Stripe; we never see your full card number.

What we collect when someone taps a card

When a card is tapped or its QR code is scanned, our link service records the time, the card, the device type and browser, the approximate city derived from the IP address, and whether the tap came from NFC or QR. The IP address itself is hashed and not retained. This lets the business that owns the card see how often it is used. We do not track the person after they leave for Google.

Retention

Individual tap events are kept for 13 months; daily totals are kept indefinitely. Account data is kept while the account exists.

Third parties

Stripe (payments), Google Places (business lookup), and our email provider (order and account email). We do not sell personal data.

Contact

privacy@gpromote.com