Privacy Policy
Information We Collect
Personal information. When you use the contact sharing form, you may provide your name, email address, and phone number. This information is forwarded via email to the contact card owner and is not stored on our servers.
Technical data. Our hosting provider (Vercel) collects standard server logs including IP addresses, user agents, and timestamps. This data is governed by Vercel's privacy policy.
No cookies, analytics, or tracking. We do not use cookies, analytics services, or tracking pixels. The only cookies that may be set are session-scoped cookies from OAuth providers (Google, Microsoft) during sign-in, and these are cleared when the session ends.
Google User Data
What we access. If you choose to use the "Update via Google" feature, we request the https://www.googleapis.com/auth/contacts scope. This allows the app to search your Google Contacts for a specific deprecated email address and update matching contacts with current email addresses, company name, and website.
Why this scope. The app needs to both read and write contacts. Read-only scopes cannot modify contacts. The auth/contacts scope is the minimum scope that supports search and update operations.
How we use it. The access token is used in a single browser session to search your contacts via the Google People API and update any matches. The entire operation completes in seconds.
Storage. None. The access token exists only in your browser's memory and is revoked immediately after the operation completes.
Sharing. None. The entire operation runs client-side in your browser. No contact data is transmitted to any server, third party, analytics service, or advertising network.
Microsoft User Data
What we access. If you choose to use the "Update via Microsoft" feature, we request the Contacts.ReadWrite scope via the Microsoft Graph API. This allows the same search-and-update operation described above for your Microsoft/Outlook contacts.
How we use it. The access token is used in a single browser session to search and update contacts. The MSAL session cache is cleared after use.
Storage and sharing. Same as Google — none. No Microsoft contact data is stored or shared. The token exists only in browser memory.
Information Sharing and Security
We do not sell personal information. All connections to this site use HTTPS. OAuth flows use industry-standard protocols (OAuth 2.0). No user data is stored on our servers beyond what is described above.
Data Retention
We retain personal information only as long as necessary. Contact sharing form submissions are delivered via email and not stored. OAuth tokens are revoked immediately after use — no Google or Microsoft data is retained.
Children's Privacy
This service is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Policy Updates
We may update this policy from time to time. Changes will be posted on this page with an updated effective date.
Contact Us
If you have questions about this privacy policy, contact us at info@nobul.tech.