Privacy policy

1. Who is responsible for your data

The data controller is [company name, to be filled in], tax number [to be filled in], registered at [address, to be filled in]. For privacy matters, write to [contact email, to be filled in].

The contacts people leave on your profile are yours: you are responsible for that data, and NAMON keeps it on your behalf, only to show it to you and let you export it. Use it only for what the person agreed to, and delete it if they ask.

2. What data we keep

From your account: your name, email, password (encrypted, never readable) and language. If you sign in with Google, we receive the name, email and photo of your Google account.

From your profiles: everything you write and upload to show to whoever opens the profile, such as your job title, contacts, photos and links.

From your cards: each card's code, which profile it is linked to and when it was activated.

From visits to your profiles: counts of visits, card taps, QR scans and saved contacts. We do not store visitors' IP addresses. To count distinct visitors we use a code computed from a random value that changes every day and is deleted the next day: after that, it is no longer possible to tell who visited.

From people who leave you their contact: the name, mobile, email, company and note they write, only after they agree to share them with you. We record when they agreed, in which language and which version of the consent text they saw. We keep nothing about the visitor beyond what they wrote.

From purchases: the delivery address, your tax number if you enter it, and the history of orders and invoices. Bank card details stay with the payment provider and never pass through NAMON.

3. What we use the data for

To run the service: create and show your profiles, link your cards, send account emails (confirmation, password recovery) and handle purchases and invoices.

To show you statistics about your profiles.

To keep the service safe: limit abusive requests, detect fraud and answer reports.

We do not use your data for advertising and we never sell it or share it with third parties for their own purposes.

4. On what legal basis

Performing our contract with you (having the account and using the service), complying with legal obligations (invoices and accounting), your consent (when someone leaves you their contact) and our legitimate interest in keeping the service safe.

5. Who has access to the data

Only the providers needed to run the service, under data processing agreements: the database and files (Supabase, in the European Union), hosting (Vercel, with functions in the European Union), payments (Stripe), certified invoices (InvoiceXpress), email delivery and Google sign-in, if you use it.

Whoever opens your profile sees what you published on it. The profile is public to anyone with the link, the card or the QR code; it only appears in search engines if you allow it in the dashboard.

6. Where the data is kept

Data and files are kept on servers in the European Union. Some providers, such as Google (sign-in) and Stripe (payments), may process data outside the European Union, with the safeguards required by law.

7. How long we keep it

Account and profile data: for as long as you have an account. When you delete the account, we delete everything for good: profiles, versions, photos, statistics and received contacts.

Invoices: for the period required by tax law, even after you delete the account.

Detailed statistics: 13 months; after that, only totals remain.

8. Cookies

We use only the necessary cookies: one to keep you signed in, one to remember the language you chose and one, lasting an hour, to remember a card tapped before signing in.

We use no advertising or tracking cookies, so there is no cookie banner. Whoever opens a profile receives no cookie at all.

9. Your rights

You can see and correct your data in the dashboard, download it as a file under "My account" and delete the account with all its data at any time.

You can also ask us by email to restrict or object to a processing. If you believe we are not respecting your rights, you can complain to the Portuguese data protection authority (CNPD).

10. Minors

NAMON is meant for people aged 16 or over. If we learn that an account belongs to someone younger, we delete it.

11. Changes to this policy

We may update this policy. When a change matters, we give notice by email or in the dashboard. The version and date are at the top of this page.