Privacy
Policy.

Last Updated: June 2026

1. Information We Collect

We collect information you provide directly to us when you create an account, build a profile, or communicate with us. This may include your name, email address, job title, company, bio, profile image, and any other information you choose to display on your public digital card.

Compliance & Technical Logging: When you access the Service, we automatically log specific technical metadata. This includes your IP address, browser user-agent, and system details. For compliance, legal, and security audits (such as managing login, registration, password changes, and account deletions), we maintain standard logs mapped to your account session.

Lead Capture ("Exchange" data): When a visitor uses the "Exchange Contact" button on your card to send their details (name, email, phone, company, and notes), we act as a data processor, securely storing these leads on your behalf in your private dashboard.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and optimize the functionality of your digital business cards.
  • Securely process subscription transactions via our payment partner, Stripe.
  • Deliver essential transactional updates, security alerts, and system support.
  • Ensure system compliance and audit trails for data controller requests.
  • Track anonymized visitor analytics to show page-view metrics in your dashboard.

3. Information Sharing

By default, the profile details you select to publish on your digital card are public and accessible to anyone with your custom link or QR code.

We never sell your personal data to third parties. We share data only with trusted infrastructure providers (like our database, hosting services, and Stripe for payments) who are contractually bound to safeguard your information.

4. Data Retention & Deletion

We retain your personal data as long as your Rectangly account is active. When you initiate an Account Deletion in your settings:

  • Your public card is instantly taken offline.
  • Your profile metadata, custom links, and captured leads are permanently purged from our database within 30 days.
  • Security and compliance logs containing transactional history are preserved for standard legal and financial audit timelines, then fully anonymized or purged.

5. Your GDPR & Privacy Rights

Depending on your location, you may have rights under the GDPR, CCPA, or similar regulations. These rights include:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Update or correct inaccurate data in your settings.
  • Right to Erasure ("Right to be Forgotten"): Fully delete your account and all associated profile details.
  • Right to Data Portability: Request an export of your leads or profile information.

To exercise any of these rights, please email us at [email protected].

6. Cookies & Third-Party Tracking

We do not use tracking cookies for advertising purposes. We use functional cookies to keep you securely logged into your dashboard, and Stripe may set security and fraud-prevention cookies during the payment checkout flow.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please email us at [email protected].