Privacy policy

Last updated October 24, 2026

Zap (zap.contact) is run by Crystax Inc. ("we"). This policy explains what we collect when you use Zap, why, and the choices you have. In short: we keep what you put in, use it only to run Zap, never sell it, and delete it when you ask.

What we collect

Your card. The details you put on a card: name, job title, company, phone numbers, email addresses, website, address, social profiles, logo and background photo. A card is meant to be shared: anyone with its link, QR code or NFC sticker can see it and save it.

People you save. Details people choose to send back to you from your card, people you add yourself, and photos of business cards you scan. These are visible only to you.

Sign-in. If you set up a passkey, we store its public key. Your fingerprint, face or screen lock never leaves your device. We use cookies only to keep you signed in and to remember the card made in your browser.

Orders. If you order printed cards: the shipping name and address, email and phone number you give us. We use them only to print and ship your order and to tell you about it.

Counts. How many times each card is opened and saved per day. These counts contain nothing about the person who opened the card.

Technical data. Our servers see your IP address and browser type with each request. We use them to keep Zap secure and to stop abuse, and our logs keep them only briefly.

We don't use advertising or analytics cookies, tracking pixels or third-party trackers.

How we use it

To show and update your card, save contacts to phones, keep your list of people, read the business cards you scan, sign you in, keep Zap secure, and answer you when you write to us. We look at totals (how many cards, opens and scans) to run and improve Zap.

We do not sell your personal information, and we do not share it for advertising.

Who we share it with

Only with companies that help us run Zap, and only for that purpose:

We may also share information when the law requires it, to protect people from harm, or as part of a merger or sale of our business, in which case this policy keeps applying to your data.

If you received a card or sent your details back

Opening a card doesn't tell its owner or us who you are. If you choose to send your details back, they go to that card's owner only, and we keep them on the owner's behalf. Ask the owner, or write to us, to have them removed.

How long we keep it

Your cards and people stay until you delete them. Scan photos you don't save are deleted within a day. Order details are kept as long as we need them for the order and our business records. When you delete a card or your account, it is removed from Zap right away; copies in our backups are overwritten within 30 days.

Your choices and rights

You can edit your card, switch its link or QR code off, delete people, delete a card (in its settings) or delete your whole account (on your account page) at any time.

You can also ask us to tell you what we hold about you, correct it or delete it by writing to privacy@zap.contact. We answer within 45 days and won't treat you differently for asking. If you live in California or another US state with a privacy law, these are your rights under that law; we don't sell or share personal information as those laws define it. You may ask through an authorized agent; we may need to confirm your identity first.

Children

Zap is not meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, write to us and we'll delete it.

Security

Zap uses encrypted connections (HTTPS), passkeys instead of passwords, private links stored only as secure hashes, and an encrypted database disk. No service can promise perfect security; if something goes wrong that affects your data, we'll tell you.

Changes

When we change this policy we update the date at the top. For important changes we'll give notice on Zap before they apply.

Contact

Crystax Inc., privacy@zap.contact.

Zap home · Privacy · Terms