Privacy Policy

Effective date: 1 October 2026

SigzenLEAD (app name: “SigzenLEAD: Card Scanner CRM”) is a business card scanner for sales teams. It is provided by Sigzen Technologies Pvt. Ltd., 1106/1107 & 1111/1112 & 1114, Shivalik Satyamev, At Vakil Saheb Bridge, Off S.P. Ring Road Bopal, Ahmedabad – 380058, Gujarat, India (“Sigzen”, “we”, “us”). This policy explains what information the SigzenLEAD mobile app and its online service collect, why, who receives it, how long it is kept, and the choices and rights you have.

If you have a question about this policy or about your data, write to support@sigzen.com.

1. Two kinds of information

Account information is about you, the person using the app. We decide how it is used and are responsible for it.

Lead information is about other people: the contacts whose business cards you scan or whose details you type in. These people have not given their details to us. Your business decides what to collect and what to do with it, and is responsible for having a lawful reason to keep and use those details. We store and process lead information only on your business’s behalf and on its instructions.

2. Information we collect

Account and business details. When you create an account you give us your full name, email address, mobile number, brand name and registered business name, and optionally a business address. We also record when you accepted our Terms and this policy, whether you chose to receive marketing emails, and whether you allowed AI card reading (section 5).

Sign-in codes. You sign in with your email address or mobile number and a 6-digit one-time code that we send to your email address. A code is valid for 5 minutes. We keep only a scrambled (hashed) copy of it, and the copy of the email in our outgoing mail queue is blanked shortly after it is sent.

Business card photos. When you scan a card, the app takes a photo of the front, and the back if you choose, with the camera, or uses a photo you pick from your gallery. The photos are uploaded to our server and kept with the lead.

Lead details. The details read from the card or typed by you: name, job title, company, phone numbers, email addresses, WhatsApp number, website and postal address, the source you tagged (for example the trade show), whether the lead was scanned or entered by hand, which team member captured it and when.

Team information. If you invite a colleague, we store the mobile number and email address you enter for them and the status of the invitation. For team members we store name, email address and whether the member is active.

Country from your internet address. To show prices in the right currency and to decide the currency of a first purchase, we work out your country from your IP address, on our own server. We do not keep the address for this: it is held only as a one-way hash for about an hour. If your business buys a plan we keep the country and currency with the billing record. A display currency you choose on the pricing page is kept in a cookie in your browser.

Plan and payment records. If your business buys a plan we store the plan, the order and payment reference numbers, the amount, the payment status and method type, the billing contact entered (name, email, phone, company name, team size) and the invoice. Payments are processed by our payment provider, Razorpay. We never see or store your card number, UPI PIN or bank login.

CRM connection. If a manager connects the business’s own CRM (for example ERPNext), we store its web address, the user name and password or API credentials entered for it (encrypted), and a log of what was sent and any errors.

Deletion requests. If you ask us to delete an account with the form on our account deletion page, we keep the email address, any mobile number or other contact details and the reason you give, so that we can check the request and reply to it (section 9).

Usage and technical records. We keep counts that make plan limits work (scans used, leads added, exports made) and a record of each AI card-reading request: which business and user made it, a reference for the scan, how many images and how large, how long it took, the app version and any error. Our web server keeps standard request logs such as IP address, time and the page requested.

Error reports. When the app hits an error it sends us the error message, technical details, the phone platform and operating system version, the app version and the screen, linked to your account, so that we can fix problems.

3. Information we do not collect

The app does not access your location, your phone’s contact list, your microphone, your SMS messages or call log. It contains no advertising, and no analytics or crash-reporting product from other companies; error reports come to us directly (section 2), and the one outside library that sends anything of its own is Google ML Kit (section 5). The app does not collect an advertising ID. We do not track you across other companies’ apps or websites.

4. Permissions the app asks for

• Camera: to photograph business cards. The app uses the camera only while you are on the scan screen.
• Photos: only when you choose “Gallery” to pick a card photo. The app receives only the pictures you select.
• Internet and network state: to talk to our server and to know when the phone is offline, so that scans can wait and upload later.

5. How card reading works, and your choice about AI

Text recognition always runs on your phone first (Google ML Kit, on the device), and the card text it reads is not sent anywhere for that step. The ML Kit library does send Google its own technical diagnostics: device model, operating system and app version, a per-installation ID, speed and error codes.

AI reading with Google Gemini, only with your permission. Before the first AI read, the app asks whether card photos may be sent to Google Gemini, an AI service from Google, to read the name, company, phone numbers and other fields more accurately. If you allow it, the photo goes over an encrypted connection to our server, which sends it to the Google Gemini API and gets back the details read from the card. Google’s own terms for that service are at https://ai.google.dev/gemini-api/terms. If you choose on-device reading only, card photos are not sent to Google for reading. You can change your choice in the app where your version offers the setting, or at any time by writing to support@sigzen.com.

Older app versions. App versions released before this permission screen existed send card photos for AI reading without asking first. Updating the app shows the permission screen; until then, you can ask us by email to switch AI reading off for your account.

Either way, the card photo is stored with the lead on our server (section 8). We do not use card photos or lead details to train any AI model. You see the result and can correct it before the lead is saved.

6. How we use information

We use account information to create and secure your account, sign you in, show your plan and usage, send sign-in codes, invitations and service messages (for example about your account or usage), provide support, issue invoices and meet tax and legal duties. We send marketing emails only if you opted in. You can opt out at any time by writing to support@sigzen.com, and every marketing email we send includes a link to unsubscribe.

We use lead information only to provide the service to your business: to read the card, save the lead, show it to your team, export it when you ask, and send it to your business’s connected CRM if one is set up.

We do not sell personal information and we do not use it for advertising.

7. Who receives information

Your business’s leads are visible to its own members and, if your manager connected one, to its own CRM (for example ERPNext). We use only these other companies to run the service: Google (Gemini API, to read card photos when you allow it), Razorpay (payments), Cloudflare (a security check on website sign-up and sign-in, when it is switched on), our email delivery provider and our hosting provider, and we will tell you before we add another. We also disclose information when the law requires it.

8. Where and how information is stored

Some of the companies listed above process information in other countries; card images sent to Google for reading may be processed outside India.

Private storage. Card photos and lead exports are stored as private files. They can be opened only by signed-in members of the business they belong to, never through a public link. Lead exports (Excel files) are deleted automatically after one day.

On your phone, the app keeps a copy of your leads, the location of card photos and your sign-in session so that it can work offline. The lead copy and the session are removed when you sign out or delete your account. Temporary photo files are removed by the phone’s operating system or when you uninstall the app.

9. How long we keep it

• Account and lead information: for as long as your business has an account.
• Sign-in codes: 5 minutes. Invitations: 7 days. Lead exports: 1 day.
• Billing records (plan orders, invoices and payment records): 72 months, as Indian GST law requires (CGST Act, section 36), even after an account is deleted.
• Usage and processing logs (plan usage and AI card-reading records): for as long as the business has an account. For a business with billing history they are kept for at least 1 year even after its last account is deleted; for a business that never bought anything they are deleted with the business (section 10).
• Error reports: up to 30 days.
• Deletion requests sent with the form on our account deletion page: the contact details and reason only until the request has been handled. The record that a request was made and handled is then kept without them.

Records kept after a deletion are pseudonymised: your name, email address and phone number are replaced, so they no longer say who you are.

10. Deleting your account and data

In the app, open Profile and choose Delete Account. Without the app, use https://sigzenlead.com/delete-account, or email support@sigzen.com from the address registered on the account.

When you delete your account, you are signed out everywhere, your name, mobile number, email address and business details are erased from the account, and it is disabled.

• If other members of your business remain, the leads you captured stay with the business, because they belong to the business and not to an individual member.
• If you are the last member and the business never bought anything, the business and everything in it are deleted permanently: all leads, their card photos, sources, usage records and the CRM connection.
• If you are the last member and the business has billing history, its leads, card photos, sources, invitations, exports and CRM connection are deleted. The business name is erased, and its billing records and usage logs are kept, pseudonymised, for the periods in section 9.

Leads already delivered to your business’s connected CRM are not removed by us; your business controls that system.

11. Security

Information travels between the app and our server over encrypted connections (HTTPS). Sign-in codes are stored only in hashed form, CRM passwords and keys are stored encrypted, and each business’s data is kept separate from every other business’s. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

12. Your rights

Under India’s Digital Personal Data Protection Act, 2023 and its Rules, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete, update or erase it;
• withdraw a consent you gave, such as AI card reading or marketing emails, as easily as you gave it (sections 5 and 6);
• write to us (section 15) and, if you are not satisfied, complain to the Data Protection Board of India: through the Data Protection Board of India's official website;
• nominate another person to exercise these rights if you die or cannot act.

Write to support@sigzen.com from the address registered on your account. We answer within 90 days at the latest. If you are in a country with its own data protection law, such as the GDPR, you also have the rights that law gives you, including the right to complain to your data protection authority.

If your business card was scanned by one of our customers and you want your details corrected or removed, contact that business. You may also write to us and we will pass your request to them.

13. Children

SigzenLEAD is a business tool for adults. It is not intended for anyone under 18 and we do not knowingly collect information from children.

14. Changes to this policy

If we change this policy we will post the new version here and change the effective date. If a change is significant we will tell you in the app or by email before it takes effect.

15. Contact