Privacy Policy

Introduction

Welcome to Penpal. We respect your privacy and are committed to protecting the personal information of our users. This Privacy Policy explains how we collect, use, share, and protect your information when you use our NFC digital cards, website, and related services.

Effective Date

This Privacy Policy is effective as of April 29, 2025.

Who We Are

Penpal is a provider of NFC-based digital cards designed to help people share contact information and build authentic professional relationships with a simple tap. Our mission is to make genuine networking easy, secure, and accessible to everyone.

Information We Collect

Information You Provide to Us

When you register for and use our services, we collect information you provide directly to us, including:

• Personal identifiers (name, email address, phone number)
• Profile information (photo, social media handles, website URLs)
• Educational information (school name, graduation year, major)
• Payment information (when you make a purchase)
• Communication preferences
• Any other information you choose to include on your digital card

Information Collected Automatically

When you use our services, we automatically collect certain information, including:

• Device information (model, operating system, unique device identifiers)
• Usage data (how you interact with our NFC cards and digital profiles)
• IP address and location data (based on your IP address)
• Log information (access times, pages viewed)

Information From NFC Card Use

When your NFC card is scanned by another person's device:

• The time and approximate location of the scan may be recorded
• Information about the device that scanned your card may be collected

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and fulfill orders
• Create and update your digital profile
• Enable contact sharing functionality
• Communicate with you about our services
• Respond to your comments, questions, and requests
• Send technical notices, updates, and security alerts
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and unauthorized access
• Comply with legal obligations

Disclosure of Your Information

We may share your information with:

Service Providers

We work with third-party service providers who need access to your information to help us operate our business (payment processors, cloud storage providers, analytics services).

Business Transfers

If we merge with another company or sell all or part of our business, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required by law, regulation, or legal process.

With Your Consent

We may share your information with third parties when you have given us your consent to do so.

Student Privacy and FERPA

For students in educational institutions that receive funding from the U.S. Department of Education, certain education records are protected under the Family Educational Rights and Privacy Act (FERPA). While most information you provide to Penpal is not considered an education record under FERPA, we recognize the importance of student privacy and design our practices to align with educational privacy principles including those outlined by the Student Privacy Policy Office of the U.S. Department of Education.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. While we do our best to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure.

Our NFC cards incorporate strong cryptography and authentication protocols to protect against unauthorized access or eavesdropping during data transfers.

Your Privacy Choices

Account Information

You can update, correct, or delete your account information at any time by logging into your account settings.

NFC Card Controls

You have options to control your NFC card's privacy features:

• Temporarily disable your card
• Choose what information is shared when your card is scanned
• Set privacy levels for different profile fields
• Enable "Untraceable Mode" which prevents tracking of your NFC card by external devices

Marketing Communications

You can opt out of receiving promotional communications from us by following the unsubscribe instructions included in our emails or by contacting us directly.

Cookies and Tracking Technologies

Most web browsers are set to accept cookies by default. You can usually adjust your browser settings to remove or reject cookies.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Children's Privacy

Our services are not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn we have collected or received personal information from a child under 13, we will delete that information.

International Data Transfers

If you are using our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our services, you consent to the transfer of your information to the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Special Provisions for Institutional Users

If Penpal services are provided through your educational institution or organization, we may collect and process your information in accordance with agreements we have with your school, university, or company. In such cases, your institution's privacy policies may also apply to how your information is handled.

California Privacy Rights

California residents have certain rights regarding their personal information under the California Consumer Privacy Act (CCPA) and other state laws. These rights may include the right to know, delete, and opt-out of the sale of personal information.

Your Consent

By using our services, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.