Privacy policy

Last updated: June 19, 2026

This Privacy Policy explains how Gibbor Technologies ("Gibbor Connect", "we", "us") collects, uses, shares, and protects information when you shop with us and when we provide NFC cards, QR codes, hosted digital profiles, vCards, order fulfillment, and related services. We currently sell to customers in the United States and Canada, and this policy also protects anyone who visits a Gibbor Connect profile, wherever they are.

Information we collect

Profile and account information, such as name, email, phone, company, title, website, social links, profile photos, logos, and other content you ask us to publish on a Gibbor Connect profile.
Order and fulfillment information, such as product selections, customization notes, shipping details, production status, and support messages.
Card and device information, such as hardware IDs, public profile URLs, QR codes, and NFC programming status.
Usage and scan information, such as NFC taps, QR scans, the page that referred a scan, browser type, user agent, timestamps, and a hashed IP address.
Store and checkout information processed through Shopify when you place an order, such as payment, billing, and shipping details.

How we use information

To create, host, update, and display digital profiles connected to NFC cards and QR codes.
To fulfill orders, program cards, generate QR codes, manage production, ship products, and provide support.
To send transactional emails about your account and orders, such as account setup links and order status updates.
To generate vCards that visitors can choose to save to their own device.
To measure basic engagement, such as how often a card or profile is scanned.
To prevent abuse, protect the service, troubleshoot errors, comply with legal obligations, and improve Gibbor Connect.

Legal bases for processing

Where applicable data protection laws require a legal basis, we rely on the following. We process account, order, profile, and card data to perform our contract with you and deliver the product you bought. We rely on your consent for optional analytics, which you can give or withdraw at any time. We rely on our legitimate interests to secure accounts, prevent abuse and fraud, troubleshoot, and improve Gibbor Connect. We process some data to comply with legal obligations, such as record-keeping and responding to lawful requests.

Public profile content

Digital profile information is meant to be shared. If a profile is public, anyone with the link, QR code, or NFC card may be able to view it. If card-only access is enabled, the profile is still accessible through the card-specific NFC or QR URL. Do not add private information to a public profile unless you are comfortable sharing it. The profile owner controls what contact fields are shown publicly and what fields are included in the vCard when supported by the product.

How we share information

We may share information with service providers that help us operate the product, including hosting, database, image storage (Cloudinary), email delivery (Resend), product analytics (PostHog), printing, shipping, and ecommerce providers.
Shopify processes store, checkout, payment, and shipping information when you buy a product from us through our Shopify store.
We may share information if required by law, to protect our rights, to prevent fraud or abuse, or as part of a business transfer.
We do not sell your personal information.

Cookies

We use a session cookie to keep you signed in, store your cookie choice in your browser's local storage, and keep server logs to operate the site and protect accounts.
If you choose to allow analytics, we use PostHog to understand site usage and improve Gibbor Connect. Analytics is optional and is not used for advertising.
If you choose essential cookies only, PostHog tracking and analytics storage remain disabled in your browser.

Your choices

You may request access, correction, or deletion of personal information we hold about you, subject to legal, security, fraud prevention, and operational limits.
Profile owners may request updates to profile content, QR destinations, public-link visibility, and vCard fields.
We send transactional emails related to your account and orders, such as account setup and order status. We do not send marketing emails. To raise a question about the emails we send, contact us.

Your data protection rights

Depending on where you live, you may have rights under laws such as US state privacy laws, Canada's PIPEDA, and other applicable data protection laws. These rights may include access to your data, correction, deletion, restriction or objection to processing, data portability, and the right to withdraw consent at any time without affecting earlier processing. To exercise any of these rights, contact us at support@gibborconnect.com. We will respond as required by applicable law and may need to verify your identity first.

International data transfers

Gibbor Connect is operated from the United States, and our service providers may process data in the United States, Canada, and other countries. If you access Gibbor Connect from outside your home country, your information may be transferred to and processed in the United States, which may have different data protection laws than where you live. Where required by applicable law, we rely on appropriate safeguards for these transfers.

Security and retention

We use reasonable administrative, technical, and organizational measures to protect personal information. No internet service is perfectly secure. We keep information for as long as needed to provide the service, maintain records, resolve disputes, prevent abuse, and meet legal obligations. We avoid collecting sensitive personal information that is not needed for the product.

Children

Gibbor Connect is not intended for children under 13 (or the minimum age required by your local law), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.