Privacy policy
Last updated: October 6, 2026
Vertex Connect runs a platform for digital business cards, NFC chips and the leads they bring. This policy says what we collect, why, who helps us process it and what you can ask of us.
1. Who is responsible
For the accounts and workspaces on the platform, Vertex Connect is responsible for the data. For the leads a workspace collects through its cards, the workspace (the business that owns the card) decides what they are used for, and we process them on its behalf.
2. What we collect
Account data: your name, email address, a password (stored only as a one-way hash) or your Google sign-in, your photo if you add one, and the workspaces and roles you belong to.
Card content: whatever you put on a card, such as names, titles, phone numbers, links, photos, files and branding.
Leads: what a visitor chooses to send through a card form (for example name, email, phone, company and message), and the notes and activity your team adds.
Visit and tap data: when a card is opened or a chip is tapped we record the time, the card or chip, the browser and device it reports, the IP address and the page that linked to it, and we give the browser a random identifier so repeat visits are counted once. We use this for the card owner's statistics and to prevent abuse, not for advertising.
Payment data: payments are handled by Paymob. We receive the plan, status and dates of a subscription, never your full card number.
Use of the app: for each day you use it, which of its parts you used (for example leads, cards or analytics), so we can see what helps people and what doesn't. Not what you did in them. It is deleted with your account.
3. Why we use it
To run the service you signed up for: showing cards, routing chip taps, delivering leads to the right people, sending the emails the service needs (invitations, password resets, confirmations, alerts), billing, and keeping accounts secure.
We do not sell personal data, and we do not use it for advertising.
4. Who processes it with us
We rely on providers who process data only to deliver their part of the service: our hosting provider and file storage (S3-compatible storage such as Cloudflare R2), Resend for email, Paymob for payments, Sentry for error reports, Google for Google sign-in and Google Wallet passes, Apple for Apple Wallet passes, Meta (WhatsApp Business) for WhatsApp alerts a workspace turns on, and Anthropic for reading the text on a photo of a paper business card when you use that feature.
A workspace can also connect its own tools (Slack, webhooks, its CRM); data then goes where the workspace sends it.
5. Cookies and local storage
We use only what the service needs: cookies that keep you signed in, remember your language and count a visitor once, and local storage for preferences such as recent pages and layout. There are no advertising or third-party tracking cookies.
6. How long we keep it
As long as the account or workspace exists. When you ask us to delete a workspace, we take it off the service straight away and erase its data within 30 days of the request; backups that still hold it expire 14 days after they were made. Leads stay as long as the workspace that collected them keeps them.
7. Your rights
You can ask to see, correct, export or delete your personal data, or object to how it is used, as the law allows (including Egypt's Personal Data Protection Law No. 151 of 2020). If you left your details on someone's card, the business that owns the card is the first place to ask; we will help them answer. Write to —.
8. Security
Connections are encrypted, passwords are hashed, each workspace sees only its own data, sign-in attempts are limited, and access inside a workspace follows the roles its owner assigns. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
9. Children
The service is for businesses and is not meant for anyone under 18.
10. Changes
If we change this policy in a way that matters, we will say so in the app or by email before it takes effect.