Privacy Policy

1. Introduction

JomCard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business card database and related services.

2. Information We Collect

3. How We Use Your Information

• To provide and maintain our services
• To process and extract information from business card images using AI
• To enable natural language search across your stored cards
• To process transactions and send related information
• To send administrative information (updates, security alerts)
• To improve our services and develop new features
• To detect, prevent, and address technical issues

4. AI Processing

We expressly use AI providers (Anthropic and OpenAI, both based in the United States) under API access that prohibits them from training on your data. They act as data processors only — they receive your card images, card content, search queries, and messages submitted via public profile contact forms to perform the task we ask, and return the result. They do NOT analyse, profile, train on, retain beyond the short-term abuse-monitoring windows required by their API terms, or share your data with anyone.

Both Anthropic and OpenAI contractually commit, under their API terms, that customer-submitted data is not used to train, fine-tune, or improve their AI models. We do not opt into any data-sharing or training programme either provider may offer. These commitments reflect our providers' API terms at the time of writing — we monitor for changes and will update this Policy if a provider's terms materially change. We may add or change AI providers from time to time; any change will preserve the no-training commitment described above and will be reflected in this Privacy Policy. By using JomCard, or by submitting a message through a JomCard profile contact form, you consent to this cross-border transfer to the United States (or other jurisdictions where our AI providers host their services) solely for the purposes described above.

5. Data Storage and Security

Your data is stored securely on servers provided by reputable infrastructure partners (currently Supabase and Vercel). We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest. We may change infrastructure providers from time to time; any change will preserve equivalent or stronger security standards and will be reflected in this Privacy Policy. We regularly review and update our security practices.

6. Data Sharing

We do not sell your personal information. We do not share your data with anyone for their own analysis, marketing, or research. We use the following processors to operate the service — each processes your data only on our instructions:

• Hosting & database — Supabase, Vercel
• Payment processing — Stripe
• AI processing — Anthropic, OpenAI (see Section 4 for what we send and why)
• Legal authorities — only when compelled by valid legal process
• Business partners — only with your explicit consent

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete your data within 30 days, except where retention is required by law.

9. Cookies

We use essential cookies to operate our service and analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

10. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform.

12. Contact Us

Questions about this Privacy Policy? Contact us at hello@venari.solutions