Privacy Policy

At the core of XSCard's product is the enablement of sharing your information with those you want to share with. As a result, data privacy is critical to the product we offer. At XSCard, we believe in the importance of being able to control who gets that information.

To reflect this importance, we've designed our product with several principles in mind:

• Your data is yours - We don't sell or provide your data to third parties without your consent. It's just not what we do here at XSCard. Your data is yours to share with your network.
• Secure Storage - Your data is protected by Enterprise grade encryption and security.
• Safe Sharing - Every XSCard has a unique code and web address. Those you share your information with will be able to look at your details. If they share your card with others or their company, others may be able to view your details.

This privacy policy ("Policy") describes how the personally identifiable information ("Personal Information") you may provide in the XSCard software applications ("Software Applications" or "Service") and any of its related products and services (collectively, "Services") is collected, protected and used. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information.

This Policy is a legally binding agreement between you ("User", "you" or "your") and XSCard ("XSCard", "we", "us" or "our"). XSCard is a South African-based digital business card service provider. By accessing and using the Software Applications and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Agreement. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Our top priority is customer data security. We may process only minimal user data, only as much as it is absolutely necessary to maintain the Software Applications and Services. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage of the Software Application and Services.

You can access and use the Software Application and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the features in the Software Applications, you may be asked to provide certain Personal Information (for example, your name and email address). We receive and store any information you knowingly provide to us when you create an account, make a purchase, or fill any online forms in the Software Applications. When required, this information may include the following:

• Personal details such as name, country of residence, etc.
• Contact information such as email address, address, etc.
• Account details such as user name, unique user ID, password, etc.
• Payment information such as credit card details, bank details, etc.
• Geolocation data such as latitude and longitude
• Certain features on the mobile device such as contacts, calendar, gallery, etc.

In order to make the Software Applications and Services available to you, or to meet a legal obligation, we need to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Any of the information we collect from you may be used for the following purposes:

• Create and manage user accounts
• Deliver products or services
• Improve products and services
• Send administrative information
• Respond to inquiries and offer support
• Request user feedback
• Improve user experience
• Enforce terms and conditions and policies
• Protect from abuse and malicious users
• Respond to legal requests and prevent harm
• Run and operate the Software Applications and Services

We comply with the Protection of Personal Information Act (POPIA) of South Africa. This means we:

• Process your personal information lawfully and in a reasonable manner
• Only collect personal information for a specific, explicitly defined purpose
• Ensure that your personal information is complete, accurate, and not misleading
• Maintain the integrity and confidentiality of your personal information
• Only retain your personal information for as long as necessary to fulfill the purpose for which it was collected

We use third party payment processors to assist us in processing your payment information securely. Such third party processors' use of your Personal Information is governed by their respective privacy policies which may or may not contain privacy protections as protective as this Policy. We suggest that you review their respective privacy policies.

You are able to delete certain Personal Information we have about you. The Personal Information you can delete may change as the Software Applications and Services change. When you delete Personal Information, however, we may maintain a copy of the unrevised Personal Information in our records for the duration necessary to comply with our obligations to our affiliates and partners, and for the purposes described below. If you would like to delete your Personal Information or permanently delete your account, you can do so by contacting us.

Depending on the requested Services or as necessary to complete any transaction or provide any service you have requested, we may share your information with your consent with our trusted third parties that work with us, any other affiliates and subsidiaries we rely upon to assist in the operation of the Software Applications and Services available to you. We do not share Personal Information with unaffiliated third parties. These service providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements.

As a data subject under POPIA, you have the right to:

• Request access to your personal information
• Request correction of your personal information
• Request deletion of your personal information
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator

We will retain and use your Personal Information for the period necessary to comply with our legal obligations, resolve disputes, and enforce our agreements unless a longer retention period is required or permitted by law. We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally.

As a South African company, we primarily store and process your data within South Africa. However, depending on your location and our service providers, data transfers may involve transferring and storing your information in a country other than your own. Where we do transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

Our websites may use cookies. A cookie is a small file of letters and numbers the website puts on your device if you allow it. These cookies recognize when your device has visited our website(s) before, so we can distinguish you from other users of the website. This improves your experience and our website(s).

We do not knowingly collect any Personal Information from children under the age of 18. If you are under the age of 18, please do not submit any Personal Information through the Software Applications and Services.

We offer electronic newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your email address confidential and will not disclose your email address to any third parties except as allowed in the information use and processing section or for the purposes of utilizing a third party provider to send such emails. We will maintain the information sent via email in accordance with applicable laws and regulations.

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

In the event we become aware that the security of the Software Applications and Services has been compromised or users' Personal Information has been disclosed to unauthorized parties, we will take appropriate measures, including investigation and reporting, as well as notification to and cooperation with law enforcement authorities as required by applicable law.

We reserve the right to modify this Policy or its terms relating to the Software Applications and Services from time to time in our discretion and will notify you of any material changes to the way in which we treat Personal Information.

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Software Applications and Services you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Software Applications and Services.

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to: