Privacy Policy

Haizel is a digital networking-card service that lets members present a profile and exchange contact details. Haizel is operated by Alba Creative Sagl, a company registered in Ticino, Switzerland. For the purposes of Swiss data-protection law (nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR), Alba Creative Sagl (“Haizel”, “we”, “us”) is the data controller. You can reach us at info@haizel.io.

Depending on how you use Haizel, we may process:

— Account data: your name, email address, and password (stored only in hashed form).
— Application data: when you apply for membership, the details you give us — your name, email address, what you do, where you’re based, a link to your work, who told you about Haizel, and anything else you choose to add.
— Profile drafts: if you build a profile before you apply, the words, links and photos you add. While you build, they stay in your own browser and are not sent to us. When you apply, the draft and its photos are sent with your application.
— Profile data: your title, company, location, photo, work images, quotes, past clients, social links, and the contact methods you choose to share (e.g. phone, email, website).
— Exchange data: when you exchange cards, the contact details the other person submits, and a record of the connection — including the date and where it took place. Location is the precise location only if the person actively chooses to share it at that moment (with the device’s permission); otherwise it is an approximate city derived from their IP address.
— Usage data: basic, privacy-preserving analytics about how the service is used, and technical data such as device and approximate location derived from your IP address.

— To review your application and, if you are accepted, to set up your profile from the draft you built — steps taken at your request before entering into a contract.
— To provide the service and your account — performance of a contract.
— To enable card exchanges and populate your vault — performance of a contract and your consent.
— To keep the service secure and improve it — our legitimate interests.
— To meet legal obligations where they apply.

When you exchange cards, the details you have chosen to share are shown to the person you connect with, and their details are saved to your vault. We do not sell your personal data.

We use trusted service providers to run Haizel — including hosting and database infrastructure (Supabase) and application hosting (Vercel) — who process data on our behalf under appropriate agreements.

Your data is stored on our providers’ infrastructure and protected with access controls and encryption in transit. Some providers may process data outside Switzerland or the EU; where they do, we rely on appropriate safeguards such as standard contractual clauses.

A profile draft sent with an application is kept for 14 days from the moment you apply, and its photos are stored privately, visible to no one but us. If you join within those 14 days, the draft becomes your profile. If you do not, it can no longer be used, and the draft and its photos are deleted within a month.

If you do not become a member, we delete your application three months after you last applied, within a month. If you join, it is kept with your account. You can ask us to delete it sooner at any time.

We keep your account and profile data for as long as your account is active. Exchange records are kept so your vault remains useful. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it to meet legal obligations.

Subject to applicable law, you may request access to your data, correction of inaccurate data, deletion, a copy in portable form, and you may object to or restrict certain processing. Where processing is based on consent, you can withdraw it at any time. To exercise any of these, contact info@haizel.io.

You also have the right to complain to a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.

We use only the cookies and storage necessary to keep you signed in and to run the service, together with privacy-preserving analytics. We do not use advertising trackers.

If you build a profile before applying, your browser keeps the draft and its photos in its own storage, on your device, so you can come back to it. It is not sent to us unless you apply, and you can remove it at any time by clearing your browser’s data for haizel.io.

Haizel is not intended for anyone under 16, and we do not knowingly collect their data.

We may update this policy from time to time; the date above shows the latest version. For any question about your privacy, or to exercise your rights, contact us at info@haizel.io.