Privacy Policy
Last updated: May 28, 2026
CardCanner, a service of Yungsten Tech LLC.
The short version
- We collect only what you send us and what is needed to text you back.
- We do not sell or share your data for marketing.
- You can delete your data at any time.
- Questions: support@cardcanner.com.
SMS/MMS Consent
CardCanner is a user-initiated SMS/MMS service. You opt in by texting a message or sending a business card photo to +1 (205) 896-2511. By initiating contact with CardCanner, you consent to receive SMS/MMS replies from CardCanner at the phone number you used, including replies that process your card photo, service messages, account or usage notices, help responses, and opt-out confirmations. Consent is not a condition of purchase. We do not buy contact lists, import third-party phone numbers, or send cold outreach.
When you use CardCanner, message frequency varies and message and data rates may apply. You may receive SMS/MMS messages from CardCanner in response to messages or photos you send us.
Message and data rates may apply. Message frequency varies.
What we collect
User-initiated content
Photos of business cards you send us, any text messages you send to our number, and your phone number.
Derived data
Contact fields extracted from card photos by optical character recognition (OCR), and enrichment data gathered from publicly available professional sources.
Account-level metadata
Your scan history, your tier (free or paid), and timestamps associated with your activity.
System logs
Message delivery status, error logs, and basic security telemetry processed by Cloudflare on our behalf.
How we use your information
- To fulfill your explicit request — processing the card photo and replying with a digital contact record.
- To maintain a private rolodex of your scanned contacts, accessible only through your phone number.
- To provide customer support when you contact us.
- To comply with applicable law and respond to lawful requests from authorities.
What we do NOT do
We do not sell or share your personal information, including your phone number, SMS/MMS opt-in data, or consent status, with third parties or affiliates for marketing or promotional purposes.
We do not sell, rent, or share SMS/MMS opt-in consent with anyone.
We do not send cold outreach, marketing messages, or unsolicited promotions. We respond only to messages you initiate.
Service providers we use
We share data with the following service providers only to the extent necessary to operate CardCanner. None of these providers receive your data for their own marketing purposes.
- Twilio — receives phone numbers, SMS/MMS message content, media URLs, delivery data, and opt-out/help keyword events to provide messaging.
- Cloudflare — hosts the legal pages, provides DNS, hosts private image storage through R2, and processes basic security logs.
- Fly.io — hosts CardCanner application servers and database infrastructure.
- RINAE LiteLLM proxy — routes OCR/enrichment model requests; may process submitted card images and extracted text as part of model routing.
- Google Gemini — processes submitted card images and extracted text for OCR.
- Perplexity — processes extracted professional contact/company text for enrichment.
- PostHog — receives anonymous product analytics events from the SMS application only; does not receive raw card images, full card contents, or SMS/MMS opt-in consent data. The public pages at cardcanner.com/privacy and cardcanner.com/terms do not load PostHog.
Data retention
- Raw card images: retained for 30 days, then automatically deleted from object storage.
- OCR'd contact records and enrichment data: retained until you request deletion.
- Message logs (delivery status, errors): retained for 90 days.
Your rights and controls
Opt out of messages
Reply STOP to opt out. After you reply STOP, CardCanner will stop sending SMS/MMS messages except for legally required or carrier-required confirmations. Reply START to resume messages at any time.
Get help
Reply HELP for help. We will send you a brief description of the service and a link to this Privacy Policy.
Delete your data
You may request deletion of your CardCanner data by replying DELETE or emailing support@cardcanner.com. We will remove your scanned contact records and account data within 48 hours of receipt.
Access your data
To request a copy of the data we hold about you, email support@cardcanner.com from the email address associated with your account, or include your phone number in the request.
If your card was scanned by someone else
If your business card was scanned by another CardCanner user and you would like the contact record removed from our system, text +1 (205) 896-2511 with your name and company name, or email support@cardcanner.com with the same details. We resolve these requests within 48 hours of receipt.
Children's privacy
CardCanner is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under the age of 13. If you believe a minor has used the service, please email support@cardcanner.com and we will delete the record promptly.
International users
CardCanner is currently a US-only service. Do not use the service from outside the United States. We do not knowingly accept opt-ins from international phone numbers and make no representation that the service complies with the laws of any country other than the United States.
Security
Data is encrypted in transit using TLS and at rest using server-side encryption in Postgres and Cloudflare R2. Access to production systems is limited to founders of Yungsten Tech LLC.
Changes to this policy
We will update the "Last updated" date at the top of this page and post a banner notice on cardcanner.com for any material change to this Privacy Policy. Continued use of CardCanner after a change is posted constitutes acceptance of the updated policy.
Contact us
Questions, deletion requests, or concerns about this Privacy Policy:
support@cardcanner.com
Yungsten Tech LLC
Massachusetts, United States