Privacy Policy

Last updated: July 9, 2026

1. Overview

This Privacy Policy explains how Vyne (“Vyne,” “we,” “us”), a Halfstack product, collects, uses, and protects information when you use vyne.cards (the “Service”). We collect only what we need to run the Service well. We don’t sell your personal data, and we don’t run advertising trackers.

2. What we collect

  • Data you give us. Your account details (name, email, and a hashed password) and the content you put on your card — your name, title, company, photo, logo, and links. Card content is information you choose to publish; a published card is public to anyone with its link or QR code.
  • Contacts visitors submit to you. When someone fills in your card’s contact-exchange form, we store the details they provide (such as name, email, phone, company, and a note) on behalf of you, the card owner. You control those contacts; we process them so you can view and export them. If you’re a visitor who submitted your details and want them removed, contact the card’s owner, or email us at info@tryhalfstack.com and we’ll route your request.
  • Analytics events. Anonymous, aggregate events about your card — views, taps, and saves — so you can see how it’s performing. These aren’t tied to a visitor’s identity, and we don’t use advertising trackers or sell this data.
  • Billing data. If you upgrade to Vyne Pro, your subscription status and limited card metadata (such as brand and last four digits). Full card numbers are collected and stored by Stripe — Vyne never stores them.
  • Support messages. Anything you send us at info@tryhalfstack.com.

3. How we use it

  • Provide, secure, and maintain the Service and your card;
  • Store and export the contacts you collect, on your behalf;
  • Show you anonymous analytics about your card;
  • Process payments and manage Vyne Pro subscriptions;
  • Respond to support requests and send service-related notices;
  • Detect and prevent fraud or abuse, and comply with the law.

Where the law requires a legal basis (for example in the EEA or UK), we rely on performing our contract with you, our legitimate interests in securing and improving the Service, compliance with legal obligations, and your consent where needed.

4. Who processes data for us

We don’t sell your personal data. We share it only with the service providers that help us run Vyne:

  • Supabase — hosted Postgres database and authentication;
  • Stripe — payment processing (Stripe holds card numbers, not us);
  • Resend — transactional email;
  • Vercel — hosting and privacy-friendly analytics.

We may also disclose information to comply with the law or to protect rights, safety, and security.

5. How long we keep it

We keep personal data while your account is active and as needed to provide the Service. When you delete your account, we delete your account data within 30 days, and residual copies in our encrypted backups are purged within 90 days — except where we must retain something longer for legal, tax, or security reasons.

6. Your rights

Depending on where you live (for example under GDPR or Canada’s PIPEDA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can view and update much of your data directly in your account, and export your contacts at any time. To make any other request, email info@tryhalfstack.com. If a contact you submitted through someone’s card concerns you, you can ask that card’s owner or us to remove it.

7. Security & international transfers

We use industry-standard measures including encryption in transit, row-level access controls on our database, and least-privilege access. No method of transmission or storage is completely secure, but we work to protect your information and review our practices regularly. We and our subprocessors may process data in countries other than yours; where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for those transfers.

8. Cookies

We use cookies only to keep you signed in and to operate the Service. We don’t use advertising or cross-site tracking cookies.

9. Children

The Service is for people aged 16 and over. It isn’t directed to children under 16, and we don’t knowingly collect their personal data. If you believe a child has given us their information, contact us and we’ll remove it.

10. Changes

We may update this Policy from time to time. We’ll post the updated version here with a new “last updated” date, and for material changes we’ll also notify you by email or in-app.

11. Contact

For any privacy question or request, contact us at info@tryhalfstack.com. See also our Terms of Service.