heyitsme

Last updated October 3, 2026

Privacy

heyitsme is a digital business card you can start free. We collect what it takes to run your card and nothing for advertising. This page explains what that is.

What we collect

When you sign in

You sign in with Google. Google sends us your name, email address, and an account identifier. We store those with the time you signed up and last signed in. We never see your Google password.

What you put on a card

Everything you type or upload to a card: name, title, company, email, phone, location, bio, links, messaging channels, portfolio items, references, and images or files. A published card is public. Anyone with the link can see it, and search engines may find it if the link is posted somewhere public. Unpublish a card to take it offline.

Details visitors share with you

A card has a form where visitors can leave their details. We store the name and anything else they choose to add (email, phone, company, title, a note) and show it only to the card owner. The owner can tag, edit, export, and delete those contacts.

Card activity

When someone opens a published card, saves the contact, taps a link, or shares the card, we record the type of action, which card, which link, and when. Owners see these as totals on their Insights page. These records do not include who the visitor was.

Google Review pages

If you connect a business, we send your search and selected business to Google Maps to find its listing. When you confirm it, we save its place ID, name, address, location, category, rating, review count, and Google links. We show the saved details on your review page until you reconnect or disconnect the business. Visitors who open your review page or select the review button do not trigger a Google Maps lookup. We record page visits, QR and NFC use, Google button clicks, and customer completion confirmations as anonymous totals. A completion confirmation does not prove that Google published a review.

If you buy a paid plan

You pay on the 2C2P payment page. heyitsme never receives or stores your card number or wallet details. 2C2P sends us the result of the payment: an invoice reference, a transaction reference, the amount, the currency, the payment method type (for example Google Pay), and whether it succeeded. We keep these with your plan, its start and end dates, and your monthly lead count, to run billing and show you your payment history.

Security and error data

To stop spam and abuse, we briefly process IP addresses, for example to limit how often a form can be sent or to avoid counting the same view twice. We store only a one-way hash of the address, and it expires within an hour. If the app crashes in your browser, it sends us the error message, the page address, and your browser type so we can fix it. Our hosting provider also keeps standard request logs, which include IP addresses.

Cookies and browser storage

  • app_session_id: keeps you signed in. Lasts up to 30 days of inactivity or until you sign out.
  • __Host-oauth_state: a one-time value that protects sign-in from forgery. Expires after 10 minutes.
  • Browser storage: if you try the builder without signing in, your draft card stays in your own browser and is never sent to us. We also remember your theme choice there.

There are no advertising cookies, no third-party trackers, and no analytics scripts.

How we use it

We use this information to run heyitsme: to show your cards, deliver contacts to you, show you your Insights, keep the service secure, and fix bugs. We do not sell personal information and we do not use it for ads.

Who else handles it

These providers process data for us, only to run the service:

  • Google handles sign-in and Google Maps business search. See Google's Privacy Policy.
  • Vercel hosts the site and API.
  • Supabase hosts the database with accounts, cards, contacts, and activity.
  • Microlink takes the screenshots shown for website links on cards. Browsers load them from Microlink.
  • S3-compatible object storage holds the images and files you upload.
  • 2C2P processes payments for paid plans, with Google as the wallet provider when you pay with Google Pay. Their own privacy terms apply to the details you enter on their page.
  • Resend sends account emails, such as new-contact notices and payment confirmations.

They may process data in countries other than yours.

How long we keep it

We keep account and card data until you delete it or ask us to close your account. Deleting a card erases it right away, with its references, visit stats, and uploaded files. Deleted contacts disappear right away too. Hashed IP data is gone within an hour. We keep error reports and hosting logs only as long as we need them to run and debug the service.

Your choices

You can edit or delete your cards, contacts, and references at any time, and you can export your contacts as a CSV file. To get a copy of your data, correct it, or delete your account and everything in it, email almanalaysay93@gmail.com. We will reply within 30 days. If you left your details on someone's card and want them removed, contact that person or email us.

Children

heyitsme is not meant for anyone under 16, and we do not knowingly collect their information.

Changes

If this policy changes, we will update the date at the top. If a change is significant, we will tell signed-in users before it takes effect.

Contact

Questions about privacy: almanalaysay93@gmail.com.