Privacy policy

Effective date: January 1, 2026

We at QCarder (owned by ASTROSIST Inc.) (“QCarder”) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your personal information when you access or use our services.

By using QCarder in any manner, you agree to the practices described in this Privacy Policy and consent to our collection, use, and sharing of your information as outlined below.

Your use of QCarder is also governed by our Terms of Use, which incorporate this Privacy Policy. Any terms not defined here have the meanings assigned to them in the Terms of Use.

What does this Privacy Policy cover?

This Privacy Policy describes how we handle personally identifiable information (“Personal Information”) that we collect when you access or use QCarder’s services (the “Services”). It does not apply to practices of companies we do not own or control, or individuals we do not manage.

We may collect different types of Personal Information, as detailed below. We use this information to operate and improve the Services, personalize your experience, deliver requested features, and analyze usage patterns. We may also share information with third parties, but only as described in this Privacy Policy.

If you access QCarder through an organization (“Organization”), this Privacy Policy applies to both you and the Organization.

Age & Eligibility

If you are under the age of majority in your place of residence, you may use QCarder only with the consent or supervision of a parent or legal guardian.

QCarder is not intended for children under 16 years of age. If we discover that we have collected Personal Information from a child under 16 without proper consent, we will delete it promptly.

Changes to our Privacy Policy?

We may update this Privacy Policy at any time. When changes are made, we will update the “Effective date” and post the revised version on our Services. If required by law, we will provide additional notice (e.g., email or in-app notification).

Your continued use of QCarder after the effective date of any changes indicates your acceptance of the updated Privacy Policy.

What Information does QCarder Collect?

We collect information you choose to share with us when you use QCarder, including:

Account & Profile Information

• Name, email address, and password
• Job title, phone number, and social media links
• Profile photo, logo, and branding elements
• Any details you add to your digital business card (your “User Profile”)

• Messages you send to our support team
• Feedback, survey responses, or inquiries

• Marketing and communication preferences
• Settings you configure within the platform

• Third-party integrations
• Services you connect to QCarder
• Organizations that grant you access to QCarder

• IP address and approximate location
• Browser type and version
• Device identifiers and operating system

• Pages and features you interact with
• Time spent on different sections
• How you use, share, or view digital cards

• Remember your device
• Keep your session secure
• Understand how users navigate the platform
• Improve performance and user experience

How does Qcarder Use the Personal Information it Receives?

As a general policy, we aim to protect your privacy and Personal Information by collecting, using or sharing as little Personal Information as possible in order to provide our Services unless you explicitly agree in writing to additional collection, use or sharing.

To the extent we do use Personal Information, we use such information to provide and improve the Services, optimize our technology, refine the experience of our users, and innovate ways to forward our mission.

Namely, we use the information we collect to:

• Administer the Services, enable you to use its features, and improve your overall user experience;
• Send information including confirmations, technical notices, updates, security alerts, and support and administrative messages;
• Respond to comments and questions and provide customer service;
• Analyze how users use the Services to help us optimize the Services and know if there are problems with the Services;
• Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity;
• With your consent, to link or combine user information with other Personal Information;
• To provide and deliver products and services requested by customers; and
• As disclosed below under the section of this Privacy Policy entitled “Will Wave Share Any of the Personal Information it Receives?”

Will Qcarder Share Any of the Personal Information it Receives?

Notwithstanding anything in this Privacy Policy, if you create a User Profile under an Organization, any Personal Information you provide be accessible by any individual with administrator access to such Organization (the “Admin”). The Admin may, at any time, access your User Profile and make any changes or, even, erase your User Profile.

We do not share or sell the Personal Information that you provide us with other organizations without your express consent, except as described in this Privacy Policy. We may share your Personal Information with third parties as described below:

• Consent: We may share Personal Information with your explicit consent.
• Affiliated Businesses: In certain situations, businesses or third-party websites we are affiliated with may sell or provide products or services to you through or in connection with the Services (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. We have no control over the policies and practices of third-party websites or businesses as to privacy or anything else, so if you choose to take part in any transaction or service relating to an affiliated website or business, please review all of these businesses’ or websites’ policies.
• Our Agents: We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you or to us. Unless we tell you differently, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us.
• Business Transfers: We may choose to buy or sell assets and may share and/or transfer customer information in connection with the evaluation of and entry into such transactions of selling Wave or buying another company. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.
• Third-Party Services: We may use third-party services, such as Google Analytics, to grow our business, to improve and develop our Services, to monitor and analyze use of our Services, to aid our technical administration, to increase the functionality and user-friendliness of our Services, and to verify that users have the authorization needed for us to process their requests. These services may collect and retain some information about you, such as the IP address assigned to you on the date you use the Services, but not your name or other personally-identifying information. We may combine the information generated through the use of these services with your Personal Information but never in a way that will identify you to any other user or third party. Although these services may plant a persistent cookie on your web browser to identify you as a unique user the next time you use the Services, the cookie cannot be used by anyone but any of the listed third- party services. 
• List of Third-Party Services:

  Name	Function	Location	Third-Party Privacy Policy
  Google LLC	Analytics, Cloud Service Provider	United States	Visit Here You can opt-out of Google Analytics by visiting: Here
  Microsoft	Cloud Service Provider	United States	Visit Here
  Stripe	Payment Processing	United States	Visit Here
  Twilio Sengrid	SMS & Email Delivery	United States	Visit Here
  PlanetScale	Database hosting	United States	Visit Here
  Vercel	Hosting Service	United States	Visit Here
  Zendesk	Customer Service & Communication	United States	Visit Here
  MaxMind	IP Service	United States	Visit Here
  Shopify	E-commerce Platform	United States	Visit Here
  OpenAI	AI Processing	United States	Visit Here

• Protection of QCarder and Others: We reserve the right to access, read, preserve, and disclose any information that we believe is necessary to comply with law or court order; enforce or apply our Terms of Use and other agreements; or protect the rights, property, or safety of Wave, our employees, our users, or others.

Is Personal Information about me secure?

At QCarder (owned by ASTROSIST Inc.), we are committed to protecting your Personal Information. We use industry-standard security measures to safeguard the data we store, including:

• Encryption (in transit and at rest)
• Firewalls and secure server environments
• Secure Socket Layer (SSL) technology
• Strict access controls

Your Choices Regarding Your Personal Information

When using QCarder (owned by ASTROSIST Inc.), you have several options for how your Personal Information is managed:

1. Accessing and Updating Your Information

If you have created an account, you can review, edit, or update certain details at any time by signing in to your QCarder dashboard.

2. Opting Out of Marketing Communications

You may unsubscribe from marketing emails by clicking the “unsubscribe” link found at the bottom of our emails or by contacting us directly. Please note that even if you opt out of marketing messages, we may still send important service-related or administrative emails.

3. Declining to Provide Information

Some Personal Information is necessary for us to deliver key features and services. If you choose not to provide required data, we may be unable to offer certain functionalities or complete your requests.

EU / EEA & UK Residents

If you are a resident of the European Economic Area (“EEA”), Switzerland, or the United Kingdom, you may have additional rights regarding your Personal Data under the General Data Protection Regulation (“GDPR”) and other applicable data protection laws.

For the purposes of this section:

• “Personal Data” generally means any information that can be used to identify an individual directly or indirectly.
• “Processing” generally refers to any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.

What Personal Data Do We Collect from You?

We collect Personal Data about you in three main ways:
1. When you provide it directly to us
2. When it is shared with us by third parties
3. When it is collected automatically through your use of our Services

• Personal Data You Provide Directly
  We receive Personal Data directly from you when you choose to share it with us. This includes, without limitation:
  • The information described in the sections “Information You Provide to Us” and “Information Collected from Other Sources”; and
  • Any additional details you submit when you communicate with us, such as through support requests, forms, or feedback.
  
  You are not required to provide all possible Personal Data just to maintain an account. However, some features or parts of the Services may only be available if you provide certain information.



• Information we automatically collect when you use our Services: Some Personal Data is automatically collected when you use our Services, including without limitation, the information described above under “Information Collected Automatically.”

How Do We Use Your Personal Data?

We process Personal Data to operate, maintain, secure, improve, and personalize our Services. This includes providing core features, enhancing your experience, supporting you, and developing new functionality.

We only process your Personal Data where we have a lawful basis to do so. These bases include contractual necessity, legitimate interests, consent, and other grounds permitted by law, as described below.

• Contractual Necessity
  
  We process certain Personal Data because it is necessary to perform our contract with you under our Terms of Use. This allows us to provide you with access to QCarder and its features.
  If you do not provide Personal Data that is required for these purposes, you may not be able to use some or all parts of the Services that depend on that data.
  
  
Legitimate Interests

We may process your Personal Data where it is necessary for our legitimate interests (or those of a third party) and where your rights and interests do not override those interests.

These legitimate interests may include, for example:
• Operating, maintaining, and improving our Services and business
• Providing customer support
• Protecting against fraud, abuse, or security threats
• Meeting our legal and compliance obligations
• Supporting or completing business transactions (such as mergers or acquisitions)

Before relying on legitimate interests, we consider and balance any potential impact on you and your rights.

Consent

In some situations, we process your Personal Data based on your explicit consent. Where this is the case, we will clearly indicate at the time of collection that we are relying on consent, and explain the specific purpose.
You can withdraw your consent at any time, but this will not affect processing that has already taken place.

Other Legal Grounds

We may also process your Personal Data when it is necessary to:
• Comply with a legal obligation
• Protect your vital interests or those of another person
• Perform a task carried out in the public interest, where applicable

How and With Whom Do We Share Your Data?

We do not sell your Personal Data. We only share it in limited circumstances, as described below, and only when it is necessary or permitted by law.

1. Within Your Organization

If you use QCarder under an Organization account, certain people within that Organization (such as administrators) may access your User Profile and related data. They may be able to view, modify, or delete your profile in line with their internal policies and our agreement with the Organization.

2. Service Providers and Vendors

We share Personal Data with trusted third-party service providers who help us operate and improve QCarder, such as:

• Hosting and cloud infrastructure
• Analytics and performance monitoring
• Payment processing
• Email, SMS, and communication tools
• Customer support platforms

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from public or government authorities
• Enforce our Terms of Use or other agreements
• Protect the rights, property, or safety of QCarder, our users, or others
• Detect, prevent, or address fraud, security, or technical issues

How Long Do We Retain Your Personal Data?

We keep your Personal Data only for as long as it is reasonably necessary to:

• Provide and maintain the Services
• Fulfill the purposes described in this Privacy Policy
• Comply with our legal, regulatory, and contractual obligations
• Resolve disputes and enforce our agreements

• We retain account and profile information for as long as your account is active.
• If you close your account or your access is removed, we will delete or anonymize your Personal Data within a reasonable period, unless we are required or permitted by law to keep it longer (for example, for tax, audit, fraud prevention, or legal compliance purposes).

What Security Measures Do We Use?

We take the security of your Personal Data seriously and use a combination of technical and organizational measures to help protect it.

These measures may include, for example:

• Encryption of data in transit (e.g., TLS/SSL)
• Firewalls and network security controls
• Access controls and authentication measures to limit who can access systems and data
• Regular monitoring of our systems for vulnerabilities or suspicious activity
• Data minimization, meaning we avoid collecting more Personal Data than we need

What Rights Do You Have Regarding Your Personal Data?

You have certain rights with respect to your Personal Data, as outlined below. To learn more or to submit a request, you can contact us at: Email: privacy@qcarder.com

Please note that in some cases we may not be able to fully comply with your request—for example, if it is manifestly unfounded or excessive, if it would infringe the rights of others, or if we are not legally required to do so. Where we cannot fully comply, we will inform you and explain why.

We may also need you to provide additional information, which may include Personal Data, to verify your identity and the nature of your request before we can act on it.

• Right to Access
  You can request more information about the Personal Data we hold about you and ask for a copy of that data.
  You can also view certain Personal Data directly by logging into your QCarder account.
• Right to Rectification
  If you believe that any Personal Data we hold about you is inaccurate or incomplete, you can ask us to correct or update it.
  In many cases, you can edit some of your information directly within the QCarder platform.
• Right to Erasure
  You can request that we delete some or all of your Personal Data from our systems, in certain circumstances (for example, when it is no longer needed for the purposes for which it was collected).
• Right to Withdraw Consent
  If we process your Personal Data based on your consent (as indicated at the time of collection), you have the right to withdraw that consent at any time.
  Please note that if you withdraw consent, you may need to give fresh consent in the future on a case-by-case basis to use certain features or services that rely on that data.
• Right to Data Portability
  You can request a copy of your Personal Data in a structured, commonly used, and machine-readable format.
  Where technically feasible, you can also ask us to transfer this data directly to another controller.
• Right to File a Complaint
  You have the right to lodge a complaint about QCarder’s handling of your Personal Data with your local data protection authority or the supervisory authority in your country or European Union Member State, if applicable.
• Right to Restrict Processing
  You can ask us to restrict the processing of your Personal Data in certain situations—for example, while we verify its accuracy or assess an objection you have raised.
• Right to Object
  You can contact us to object to our use or disclosure of your Personal Data for certain purposes, particularly where we rely on legitimate interests (including any direct marketing activities).

Transfers of Personal Data

QCarder (owned by ASTROSIST Inc.) operates globally, and your Personal Data may be transferred to, stored in, or processed in countries other than the one in which you live. These countries may have data protection laws that are different from those in your jurisdiction and, in some cases, may offer a lower level of protection.

Where we transfer Personal Data internationally, we take appropriate steps to ensure that your information is treated securely and in accordance with this Privacy Policy and applicable law. These safeguards may include, for example:

• Using standard contractual clauses or other approved transfer mechanisms where required by law; and
• Working only with service providers who implement appropriate technical and organizational security measures.

What If You Have Questions Regarding Your Personal Data?

If you have any questions, concerns, or requests related to this Privacy Policy or how QCarder (owned by ASTROSIST Inc.) handles your Personal Data, you can contact us at:

• Email: privacy@qcarder.com

What if I have questions about this policy?

If you have any questions or concerns about this Privacy Policy or how QCarder (owned byASTROSISTInc.) handles your information, please contact us at:

Email: privacy@qcarder.com

We’ll review your inquiry and respond as soon as reasonably possible.

PRIVACY POLICY ADDENDUM FOR CALIFORNIA RESIDENTS

This Privacy Policy Addendum supplements the Privacy Policy and describes additional rights of residents of the State of California.

Persons with disabilities may obtain this notice in alternative format upon request by contacting us at at privacy@qcarder.com

Your California Privacy Rights

If you are a resident of California, you may have certain rights regarding your personal information under California law.

“Shine the Light” – Direct Marketing Disclosure

California law allows residents to request, once per year and free of charge, information about how a business shares certain categories of personal information with third parties for their own direct marketing purposes.

QCarder (owned by ASTROSIST Inc.) does not share personal information with third parties for their own direct marketing purposes.

If you have any questions about this, you can contact us at:
Email: privacy@qcarder.com

In addition to the above, California residents may have further rights under the California Consumer Privacy Act (CCPA), which are described in the “California Consumer Privacy Act” section of this Privacy Policy.

California Consumer Privacy Act

If you are a California resident, you may have additional rights regarding your personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section explains those rights and how QCarder (owned by ASTROSIST Inc.) handles personal information under California law.

For this section, “personal information” has the meaning given to it in the CCPA/CPRA: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Categories of Personal Information We Collect

Depending on how you use QCarder, we may have collected the following categories of personal information in the last 12 months:

• Identifiers – such as your name, email address, username, IP address, and other similar identifiers.
• Customer records information – such as billing or payment details (if you make purchases), and basic account information.
• Commercial information – such as records of purchases or subscription details related to QCarder services.
• Internet or other electronic network activity information – such as browsing history on our website, usage data, and interactions with the Services.
• Geolocation data – such as approximate location derived from your IP address.
• Professional or employment-related information – such as your job title, company name, and role when you add these details to your profile.
• Audio/visual content – such as profile images, logos, or media content you choose to upload.

• You directly (when you create an account, build your profile, or communicate with us)
• Your use of the Services (automatic collection through cookies, logs, and similar technologies)
• Third-party service providers and integrations, where applicable

• Service providers and contractors who help us operate, support, and improve QCarder (e.g., hosting, analytics, payment processing, communications).
• Business partners or integrators where you choose to connect QCarder with third-party tools.
• Affiliates or successors in connection with a corporate transaction (e.g., merger, acquisition, or sale of assets).
• Authorities or legal parties, when required to comply with law or protect our rights or users.

• Right to Know / Access
• You can request that we disclose the categories and specific pieces of personal information we have collected about you in the past 12 months, as well as details about the sources, purposes, and categories of third parties with whom we share it.
• Right to Delete
• You can request that we delete personal information we have collected from you, subject to certain exceptions (for example, where the information is needed to complete a transaction, comply with a legal obligation, detect security incidents, or protect against fraudulent activity).
• Right to Correct
• You can request that we correct inaccurate personal information that we maintain about you.
• Right to Non-Discrimination
• You have the right not to be discriminated against for exercising any of your CCPA rights. We will not deny services, provide a different level of service, or charge different prices solely because you exercised your rights under the CCPA/CPRA.
• Right to Opt-Out of Sale or Sharing
• You have the right to direct a business not to sell or share your personal information.
• QCarder does not sell or share personal information for cross-context behavioral advertising.

• Specify which right you want to exercise (e.g., access, delete, correct), and
• Provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information (or an authorized agent).

Right to Notice at Collection Regarding the Categories of Personal Information Collected

You have the right to receive notice of the categories of personal information that QCarder (owned by ASTROSIST Inc.) collects about you, and the purposes for which we use that information, at or before the time of collection.
The categories of personal information we may collect (as defined under the CCPA/CPRA) include:

• Identifiers – such as your name, email address, username, IP address, and similar identifiers.
• Customer records information – such as billing details and basic account information when you purchase or subscribe to QCarder services.
• Commercial information – such as records of products or services you have purchased or considered.
• Internet or other electronic network activity information – such as browsing history on our website, usage data, and interactions with our Services.
• Geolocation data – such as approximate location inferred from your IP address.
• Professional or employment-related information – such as job title, company name, and role, when you choose to include them in your profile.
• Audio/visual content – such as profile photos, logos, or media files that you upload as part of your QCarder profile.

Right to Know/Access Information

If you are a California resident, you have the right to request access to the personal information that QCarder (owned byASTROSIST Inc.) has collected about you in the past 12 months.

This includes the right to request:

• The categories of personal information we have collected about you
• The specific pieces of personal information we hold about you
• The sources from which we collected your personal information
• The business or commercial purposes for collecting that information
• The categories of third parties or service providers with whom we have shared it

Right to Request Deletion of Information 

If you are a California resident, you have the right to request that QCarder (owned by ASTROSIST Inc.) delete the personal information we have collected from you, subject to certain exceptions under the law.

Once we receive and verify your request, we will delete your personal information from our records, and direct our service providers to do the same, unless an exception applies. We may, for example, deny your deletion request if we need the information to:

• Complete a transaction or provide a service you requested
• Detect security incidents, protect against malicious or illegal activity, or prosecute those responsible
• Debug or repair errors that impair existing functionality
• Comply with a legal obligation
• Use the information internally in ways that are reasonably aligned with your relationship with us and compatible with the context in which it was provided

How to Submit a Request 

If you wish to exercise any of your rights under the CCPA/CPRA—such as the right to know, access, correct, or delete your personal information—you can submit a request to QCarder (owned by ASTROSIST Inc.) using the contact details below:

Email: privacy@qcarder.com

When you contact us, please:

• Specify which right(s) you would like to exercise (e.g., access, deletion, correction), and
• Provide enough information for us to reasonably verify your identity (and, if applicable, your authority to act on behalf of another person).

• A written authorization signed by you, or
• A valid power of attorney, and
• Sufficient information to verify both your identity and the agent’s identity and authority.

Right to Opt-Out of Sale of Personal Information to Third Parties

Under the CCPA/CPRA, California residents have the right to direct a business not to sell their personal information to third parties.

QCarder (owned by ASTROSISTInc.) does not sell personal information to third parties.
We also do not share personal information for cross-context behavioral advertising as defined under California law.

If our practices change in the future, we will update this Privacy Policy and provide any required mechanisms for you to exercise your right to opt out.

Right to Information Regarding Participation in Data Sharing for Financial Incentives

Under the CCPA/CPRA, California residents have the right to receive information about any programs in which a business offers financial incentives (such as discounts, rewards, or other benefits) in exchange for the collection, retention, or sale of personal information.

At this time, QCarder (owned by ASTROSIST Inc.) does not offer any financial incentive programs in connection with your personal information. We do not provide discounts, rewards, or other benefits in exchange for you allowing us to sell or share your personal information.

If we introduce such a program in the future, we will:

• Clearly describe the material terms of the program
• Explain what personal information is involved
• Explain how you can opt in and how you may withdraw at any time
• Update this Privacy Policy accordingly