Privacy Policy

1. Who we are

CardNTap is a digital identity and smart networking product built and operated by Enbiit, headquartered in Guwahati, Assam, India. This policy explains what personal data we collect when you use cardntap.enbiit.com (the product store and card studio), links.enbiit.com (the digital profile platform) and the NFC smart cards themselves, and how we handle that data.

In short: our business model is selling cards and subscriptions — not selling your data. We collect the minimum needed to print your card, deliver it, run your digital profile and process payments.

2. What we collect

Account data: your name, email, phone number and password (stored only as a secure hash) when you register with email, or your Google account name, email and profile picture when you use Google Sign-In.

Card and profile data: the name, title, company, phone, logo and links you enter in the Card Studio or profile manager. Anything you publish on your public profile (links.enbiit.com/u/yourname) is, by design, visible to anyone who taps your card or scans your QR code — that is the product working as intended.

Order data: delivery address, order contents, GST invoice details and payment status. Card payments are processed by Razorpay; we never see or store your card number, UPI PIN or net-banking credentials — only a payment reference ID.

Usage data: anonymous analytics such as profile views, contact saves and QR scans, so you can measure your networking and we can improve the product.

3. How we use it

To print and deliver your NFC card, to keep your digital profile live at your chosen link, to process orders and refunds, to send transactional updates (order confirmation, dispatch, delivery) and to provide customer support.

We also use aggregated, de-identified numbers (for example, "how many profile views happened this month across India") to improve CardNTap. We do not sell, rent or trade your personal data to third parties, ever.

4. What the NFC chip stores

The NTAG215 chip inside every CardNTap card stores exactly one thing: a URL pointing to your digital profile. No name, phone number or other personal information is written to the chip itself. If you change jobs, numbers or cities, you update your profile online and every future tap reflects the change instantly — the card never needs reprinting.

5. Third-party processors

Payments: Razorpay (Razorpay Software Pvt Ltd) for UPI, cards and net-banking. Logistics: Shiprocket and partner couriers for dispatch and delivery tracking. Address verification: India Post PIN-code records. Login: Google OAuth when you choose "Continue with Google". Each processor receives only the data required for its job.

6. Your choices & rights

You can edit or delete your digital profile at any time from the profile manager, request account deletion by contacting support (we wipe your account and profile data within 30 days), export your order history on request, and opt out of non-essential communication at any time.

Deleting your account deactivates the NFC URL on your card — taps will then show a "card inactive" page instead of your details.

7. Security & retention

Data is stored encrypted at rest, transported over HTTPS/TLS, and access is restricted to the minimal set of Enbiit team members who need it to run fulfilment and support. Order records are retained for 7 years as required by Indian tax law (GST); account and profile data are retained until you delete them.

8. Contact

Questions about this policy or your data? Reach us at hello@enbiit.com or through the contact page. We respond to privacy requests within 72 hours.