Privacy Policy
Last updated: 25 August 2026
1. Information we collect
We collect the following categories of personal information:
- Account information — the email address and password (stored as a securely hashed value, never in plain text) you use to sign up.
- Business card content — the name, job title, company, phone numbers, email address, website, physical address, and logo image you choose to add to a card.
- Organization & billing information — your organization's name, plan, seat usage, and (if you're on a paid plan) a Stripe customer/subscription reference. We do not store your full card number — see "Payment information" below.
- Usage information — basic technical information such as IP address and browser type, collected automatically for security and troubleshooting (e.g. in server logs).
2. Information about people who scan your card
Cerdyn's public card pages, QR codes, and "save to contacts" files are designed to be viewable and downloadable without the viewer needing a Cerdyn account. We do not require the person scanning your QR code to create an account or provide us with their own personal information in order to save your card to their phone — that information is transferred directly to their device and is not retained on our servers as part of that action.
3. How we use your information
- To provide, operate, and maintain the Cerdyn service, including generating your card pages, QR codes, and downloadable contact files;
- To manage your account, organization membership, and subscription billing;
- To send you service-related emails, such as password reset links and (where applicable) billing notifications;
- To detect, prevent, and address technical issues, fraud, or misuse of the service;
- To comply with our legal obligations.
We do not sell your personal information, and we do not use your business card content for advertising purposes.
4. Payment information
Subscription payments are processed by Stripe, Inc. We do not store your full card number, expiry date, or CVC on our servers — these are collected and processed directly by Stripe under its own privacy policy. We retain a reference to your Stripe customer and subscription IDs so we can manage your subscription.
5. Other service providers
We share limited personal information with the following service providers, solely to operate Cerdyn:
- Stripe — payment processing and subscription billing.
- Our email delivery provider — to send account-related emails such as password reset links.
- Our hosting provider — to store and serve the application and its data.
We require these providers to protect your information and use it only for the purposes we've engaged them for.
6. Data retention
We retain your account and card information for as long as your account is active. If you delete a card, its logo and QR code are removed from our storage. If you delete your account, contact us at the address below and we'll delete your personal information within a reasonable time, except where we're required to retain certain records (for example, billing records) for legal or accounting purposes.
7. Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed password storage, and access controls limiting who can view or modify your data. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
8. Your rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate information (you can update most card details yourself, at any time, from your dashboard);
- Request deletion of your account and associated personal information;
- Ask us questions about how your information is handled, or make a complaint.
To exercise these rights, contact us at [email protected]. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Cookies
Cerdyn uses a single essential session cookie to keep you logged in. We do not use third-party advertising or tracking cookies.
10. International data transfers
Some of our service providers (such as Stripe and our hosting or email providers) may process or store information outside Australia. Where this occurs, we take reasonable steps to ensure your information continues to be protected consistently with the Australian Privacy Principles.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll take reasonable steps to notify you before they take effect.
12. Contact us
For privacy questions or requests, contact us at [email protected].