What we collect
From merchants: business name, contact name, email, phone, mailing address, hours of operation, website, payment information (handled by Stripe — we don't store card numbers), the URLs and landing-page content you supply, and your dashboard activity.
From your customers when they scan a QR code: timestamp of the scan, anonymous device user-agent, IP address (used for geolocation and bot filtering), and any data they provide on a contact form you've enabled on a landing page.
Why we collect it
- To run the Service — printing and mailing your card, routing QR scans, billing.
- To report performance — scan counts, conversion events, leads.
- To prevent abuse — bot filtering, rate limiting, fraud detection.
- To comply with law — tax records, lawful requests.
Who we share it with
- Stripe — for payment processing. See Stripe's privacy policy.
- USPS — for mail delivery (only what's on the mailer itself, which is public-facing anyway).
- Email provider — for transactional email (welcome, payment confirmations, weekly scan reports, lead notifications).
- OpenStreetMap (Nominatim) — when geocoding landing-page addresses. Only the address is sent; no personal identifiers.
We don't sell your data and we don't share scan-level data with third-party advertising networks.
How long we keep it
Account and order records are retained for as long as your account is active plus 7 years for accounting purposes. Scan events attributable to a specific mailing are retained for the same window. Aggregated, anonymized scan stats may be retained indefinitely.
Your rights
You can edit your business profile from the merchant dashboard. You can cancel your account at any time — once cancelled, we'll delete personally identifying information within 90 days, excepting records we're required to keep for tax / legal compliance.
Depending on where you live, you may have additional rights (access, deletion, portability, opt-out of certain processing). Contact us if you'd like to exercise those rights.
Cookies
We use cookies strictly to keep you signed in to the dashboard and to remember which merchant you have active. We don't use tracking cookies or third-party analytics on the marketing site or landing pages.
Children
The Service is intended for businesses. We don't knowingly collect personal information from anyone under 13.
Changes
Material changes to this policy will be announced by email and will require re-acceptance before your next reservation.
Contact
Privacy questions: info@thebigasscard.com.