Data Protection

Privacy Policy

Last Updated: August 2026 • Version 1.0.0

1. Our Privacy Commitment

At earlyfloww, your personal privacy and contact security are our highest priority. We do not sell, rent, or monetize your contact records, visitor scans, or personal images to third-party ad networks.

2. Information We Collect

  • Account Credentials: Email address used for passwordless OTP authentication.
  • Card Data: Photos, full name, phone number, social links, bio, and menu items you choose to publish publicly.
  • Scan & Tap Analytics: Aggregated device type, operating system, and approximate country for your personal card analytics. No precise GPS tracking is ever performed.

3. NFC & QR Scan Privacy

When a smartphone taps your NFC tag or scans your QR code, the phone simply navigates to your public URL (/c/[slug]). We do not plant permanent cookies or tracking pixels on your visitors' devices.

4. Data Storage & Encryption

Your card records and authentication tokens are encrypted in transit via SSL/TLS 1.3 and stored in enterprise-grade Supabase PostgreSQL clusters with row-level security policies.

5. Right to Erasure

Under GDPR and international data standards, you retain the right to delete all your digital cards and stored personal data at any time directly through your dashboard.

© 2026 earlyfloww • Privacy Policy