Privacy policy

Nomiqo is a digital business card: you share it with a QR code or link, and the people you meet save your contact in one tap. This policy explains what personal information we collect, why, where it is stored, how long we keep it, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), and we respect the rights of people in Quebec and the European Union where those laws apply.

Who we are and how to reach us

Nomiqo is based in Ontario, Canada. Our privacy officer is responsible for how we handle personal information. For any question, request or complaint, email nomiqosupport@gmail.com.

What we collect and why

If you join the waitlist

• Your email address, the date and time you joined, the wording you agreed to, and how you found us (for example a campaign label in the link you followed).
• Why: to email you once when Nomiqo opens. We don't use it for anything else and don't add you to a newsletter.

If you create an account

• Account details: email address, password (stored only as a secure hash, never in plain text), and optionally your name.
• Card content you enter: name, title, company, contact details, photo, logo and links. Fields you mark private never appear on your public card.
• Contacts you record: people you add, plus your notes, tags and follow-up dates. These are private to your account. You are responsible for having a reasonable basis to keep information about the people you add.
• How you found us (a campaign label or the card you came from) and when you were last active, so we can understand which channels work and keep the service healthy.
• Why: to provide your card, your contacts and your analytics, to keep your account secure, and to improve Nomiqo.

If you share your details through someone's card

• What you type into “Share your details” (name, email, and optionally phone, company and a message) goes only to that card's owner, after you agree.
• We keep it in the card owner's account until they delete it or close their account. To have it removed, contact the card owner or email nomiqosupport@gmail.com.

If you view a card or visit our website

• Viewing a card needs no account. To count views and contact downloads, we store the type of event, a coarse source (QR code, link or wallet pass), the time, and a one-way hash of your IP address and browser that changes every day. We never store your raw IP address.
• On our website we count page visits as plain totals with the page and campaign label. These counts contain no IP address, browser details or identifier.
• To stop spam and abuse, we briefly keep a hashed version of your IP address when you submit a form.

If you apply for the team pilot

• Your name, work email, organization, team size and the details you choose to add. We use them only to discuss the pilot with you.

Cookies and similar technology

We use only what the service needs to work: a secure sign-in cookie when you have an account, and short-lived storage in your browser to avoid counting the same visit twice and to remember which link you arrived from until you sign up. We do not use advertising cookies, cross-site tracking, or third-party analytics, and we do not sell or rent personal information.

Who we share information with

• Service providers that run Nomiqo for us, under contracts that limit their use of your information: Vercel (website hosting) and Supabase (database, sign-in and file storage). When we add email delivery and payments, we will use providers bound by the same limits and list them here.
• Card owners receive the details you choose to share with them.
• Authorities when the law requires it, for example a valid court order.

Where your information is stored

Our service providers store and process information in the United States. While it is there, it is protected by our contracts with those providers but may be accessible to courts and authorities in the United States under their laws. By using Nomiqo you acknowledge this transfer. Questions about it can go to nomiqosupport@gmail.com.

How long we keep information

• Waitlist email: until we send the launch email, then for up to 6 months, or until you ask us to remove it, whichever comes first.
• Account, cards and contacts: until you delete them or close your account. Deletion is immediate in the live service; copies in backups expire within 30 days.
• Card and page analytics: 13 months.
• Hashed records used to stop spam: 1 day.
• Team pilot applications: 2 years, unless you ask us to delete them sooner.

Your rights and choices

• Access and correction: see and correct your information. Account holders can edit everything in the app and download it from Settings (contacts as CSV, all account data as JSON).
• Deletion: delete cards, contacts or your whole account in Settings, or ask us to delete information we hold about you, including your waitlist email.
• Withdrawing consent: you can withdraw consent at any time, for example by unsubscribing from our email. Withdrawing doesn't affect what we did before.
• To make a request, email nomiqosupport@gmail.com from the address you used with Nomiqo. We reply within 30 days. We may need to confirm your identity first.
• If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). In Quebec, you can contact the Commission d'accès à l'information. In the European Union, you can contact your local data protection authority.

Email from us

If you join the waitlist, we send one email when Nomiqo opens. Account holders receive messages needed to run their account, such as sign-in links and password resets. Every promotional email includes an unsubscribe link, and you can also unsubscribe by emailing nomiqosupport@gmail.com. We act on unsubscribe requests within 10 business days.

Security

Information travels over encrypted connections (HTTPS). Passwords are stored only as secure hashes. Database rules let each account see only its own data, and access to our systems is limited to the people who run Nomiqo. No system is perfectly secure, so we also keep a plan for responding to incidents.

If something goes wrong

If a breach of security safeguards involving your information creates a real risk of significant harm, we will tell you and the Privacy Commissioner of Canada as soon as feasible, and we keep a record of every breach as the law requires.

Children

Nomiqo is for people aged 13 and older. In Quebec, people under 14 need a parent or guardian's consent. If you believe a child has given us information without the required consent, email nomiqosupport@gmail.com and we will delete it.

Changes to this policy

We will update the date at the top when this policy changes. If a change materially affects how we use information you already gave us, we will tell you before it applies and ask for your consent where required.