Privacy Policy

1. Introduction & scope

Parichay Technologies ("Parichay", "we", "us", "our") builds a digital business card, AI-powered card scanner, and contact management platform, available as a web app, mobile apps, and optional physical NFC cards. This Privacy Policy explains what personal data we collect when you create a Parichay card, scan a paper business card, or otherwise use our products (together, the "Service"), why we collect it, how we protect it, and what choices and rights you have.

This policy applies to the personal data of registered users of Parichay (account holders, cardholders) as well as the personal data of third parties that users add to the Service — for example, a contact captured through our AI scanner, or a person who views a shared digital card. It applies wherever the Service is accessed, and to both our free and paid (Pro, Team) tiers.

By creating a Parichay account or using the Service, you agree to the collection and use of information as described here. This policy should be read alongside our Terms & Conditions and our Cookie Policy. If you do not agree with this policy, please do not use the Service.

2. Information we collect

We collect only what is needed to run your digital card, power the AI scanner, and keep your contacts organised. We group it into six categories:

2.1 Account information

When you sign up, we collect your name, email address, phone number, a password or authentication token (if you sign in with a third-party provider), and billing details for paid tiers (processed by our payment processor — we do not store full card numbers). We also keep basic account metadata such as your plan tier, team membership, and language/region preference.

2.2 Your digital card and profile data

To build your Parichay digital card, we store the details you choose to include: name, job title, company, department, photo or logo, phone numbers, email addresses, physical address, social and website links, and any custom fields you add. If you order a physical NFC card, we also store the personalization details (printed name, title, and design choices) needed to manufacture and ship it. This card data is visible to anyone you share your card with, by design.

2.3 Data extracted from scanned paper cards (OCR)

Our AI scanner lets you photograph a physical business card. We process that image using optical character recognition and machine-learning models — including models tuned for multi-language and mixed-script cards — to extract structured fields: name, company, role, phone, email, and address. The extracted fields are saved to your contacts. The source photo itself is used only to perform this extraction and is not retained as a permanent record; see the retention table in Section 7 for exact timing.

2.4 Contacts and notes you add

Beyond scanned cards, you may manually add contacts, tag them, attach notes, or import contacts from a CSV or vCard file, your phone's native address book, or a connected CRM. This information is stored so you can search, filter, and sync it back out. You are responsible for having a lawful basis to share another person's information with us — see Section 4.

2.5 Device, usage & log data

Like most cloud services, we automatically collect technical information when you use the Service: IP address, device and browser type, operating system, app version, crash logs, and usage events (such as which features you open, card views, and scan counts). We use this to operate, secure, and improve the Service, and to produce aggregate, de-identified analytics.

2.6 Cookies and similar technologies

Our website and web app use cookies and similar technologies for authentication, preferences, and analytics. We keep this section brief here — full details, including the specific cookies we set and how to control them, are in our Cookie Policy.

3. How we use your information

We use the information described above to:

• Create, host, and render your digital business card and share it via QR code, link, or NFC tap;
• Run the AI scanner and extract structured contact fields from photographed cards, including handling multi-language and mixed-script text;
• Store, tag, search, and organise your contacts, and power exports to CSV/vCard, sync to your phone's native contacts, and pushes to a connected CRM;
• Manufacture, personalize, and ship physical NFC cards you order;
• Authenticate you, secure your account, and prevent fraud or abuse;
• Process payments and manage subscriptions for paid tiers;
• Provide customer support and respond to your requests;
• Send service communications (account, billing, security notices) and, where you have opted in, product updates; and
• Monitor, debug, and improve the Service through aggregate usage analytics.

We do not use the contents of your contacts' personal data to build advertising profiles, and we do not sell that data. Any product-improvement analytics are performed on de-identified or aggregated data wherever practicable.

4. Legal basis for processing

Parichay serves users in India, the EU, and elsewhere, so we rely on the appropriate legal basis for your region:

Under India's DPDP Act, 2023

Where the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies, we process your personal data on the basis of your consent, given when you create an account, build a digital card, or use the AI scanner, and for certain legitimate uses recognised under the DPDP Act, such as providing you the Service you have requested, responding to a support request, or complying with a legal obligation. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal, as described in Section 8.

Under the EU GDPR

Where the General Data Protection Regulation ("GDPR") applies, we rely on one or more of the following bases depending on the activity:

• Contract: processing necessary to create your account and provide the digital card, scanner, and contact-management features you sign up for;
• Consent: for optional features such as marketing emails, certain cookies, and where you choose to import third-party contact data;
• Legitimate interests: for security, fraud prevention, and product analytics, balanced against your rights and freedoms; and
• Legal obligation: where we must retain or disclose data to comply with applicable law.

5. How we share information

We do not sell or rent your personal data, or your contacts' personal data, to third parties. Your network is not a data product. We share information only in the limited circumstances below:

Service providers and processors

We use vetted third parties to operate the Service — for example, cloud hosting and storage, OCR/ML infrastructure, payment processing, email delivery, customer support tooling, and NFC card printing and fulfilment. These providers act as our data processors, are bound by confidentiality and data-protection obligations, and may only use your data to perform services on our behalf.

Your own sharing actions

When you share your digital card (via QR, link, or NFC tap), the card fields you chose to include are shown to the recipient — that disclosure is directed by you. Likewise, if you export contacts or push them to a connected CRM, that transfer is initiated by your instruction.

Legal and regulatory disclosure

We may disclose information if required to do so by law, regulation, court order, or valid governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Parichay, our users, or the public.

Business transfers

If Parichay is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will require the receiving entity to honour the commitments made in this Privacy Policy and will notify affected users of any material change in ownership or use of their data.

6. Data storage, security & international transfers

Your data — including your digital card, scanned contact records, and account details — is stored in "Parichay Cloud," our managed cloud infrastructure. Data is encrypted in transit (via TLS) and at rest (via industry-standard encryption at the storage layer). We apply access controls so that only authorised personnel, on a need-to-know basis, can access production data, and we log and monitor access to sensitive systems.

Because Parichay operates globally, your data may be processed or stored on servers located outside your home country, including transfers between India and the EU/EEA where our infrastructure or service providers are located. Where we transfer personal data internationally, we use appropriate safeguards recognised under applicable law — such as standard contractual clauses under the GDPR, or equivalent mechanisms recognised under the DPDP Act — to ensure your data continues to receive a comparable level of protection.

No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security, and we encourage you to use a strong, unique password and to safeguard your login credentials.

7. Data retention

We keep personal data only as long as necessary for the purposes described in this policy, to provide the Service, and to meet our legal obligations. Approximate retention periods are:

Data type	Retention period
Account information (name, email, phone, plan details)	Duration of your account, plus 90 days after deletion (for recovery and fraud checks)
Digital card & profile data	Duration of your account, plus 90 days after deletion
Scanned business-card images (source photos)	Processed for OCR extraction and deleted within 30 days; typically removed immediately after successful extraction
Extracted contact records & notes	Duration of your account, or until you delete the contact
Billing & transaction records	Up to 7 years, to meet tax and accounting obligations
Device, usage & log data	Up to 12 months, then aggregated or deleted
Backups	Purged within 60 days of the corresponding data being deleted from production

Where you exercise your right to deletion under Section 8, we delete or irreversibly anonymise your personal data within the periods above, except where we must retain limited records to comply with a legal obligation, resolve disputes, or enforce our agreements.

8. Your rights

Subject to applicable law, you have the following rights over your personal data:

• Access: request a copy of the personal data we hold about you;
• Correction: ask us to correct inaccurate or incomplete data — most account and card fields can also be edited directly in the app;
• Deletion: request deletion of your account and associated personal data at any time via Delete my data;
• Portability / export: export your contacts as CSV or vCard, or request a machine-readable export of your account data;
• Objection & restriction: object to or ask us to restrict certain processing, such as marketing communications or specific analytics uses; and
• Grievance redressal (DPDP Act): if you are not satisfied with how we have handled your personal data or a request, you may raise a grievance with our Grievance Officer (Section 12), who will respond within the timelines required under the DPDP Act.

To exercise any of these rights, contact us at info@azapi.ai or use the in-app account settings where available. We may need to verify your identity before acting on a request. EU users also have the right to lodge a complaint with their local data protection authority.

9. Children's privacy

The Service is intended for business and professional use and is not directed at, or intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@azapi.ai and we will take steps to delete it.

10. Cookies

Our website and web app use cookies and similar technologies for essential functionality (such as keeping you signed in), preferences, and analytics. You can control non-essential cookies through your browser settings or, where available, our cookie preference controls. For the full list of cookies we use, their purpose, and how to manage them, see our Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. The "Last updated" date at the top of this page reflects the most recent revision. For material changes — such as a new category of data collected or a change in how we share data — we will provide additional notice, such as an in-app notification or an email to your registered address, before the change takes effect. We encourage you to review this policy periodically.

12. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out:

• Email: info@azapi.ai
• Phone: +91 9599809427
• Address: 102, Surya Pratham Complex, Abhyankar Nagar, Nagpur - 440022, Maharashtra
• Grievance Officer: Grievance Officer, Parichay Technologies — info@azapi.ai

You can also reach us through our contact page, or manage your account directly via data deletion and our Terms & Conditions.