Visita ("we," "our," or "us") is a digital business-card platform that lets professionals create, share, and discover contact cards. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it.
By creating an account or using the Visita app, you agree to this policy. If you do not agree, please discontinue use and request deletion of your account.
Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and the General Data Protection Regulation (GDPR), we are the Data Fiduciary / Controller for personal data processed through the Visita platform.
| Detail | Information |
|---|---|
| Legal entity | [YOUR FULL LEGAL NAME] (Individual Developer) |
| Registered address | [Street, City, State – PIN Code, India] |
| Contact email | nextgeninvteam+visita@gmail.com |
| App package | com.visita.visita_app |
| Category | Examples | Required? |
|---|---|---|
| Account credentials | Email address, password (hashed) | Yes |
| Card profile | Full name, profession, bio | Yes |
| Contact details | Phone number, city / location | Optional |
| Profile images | Avatar photo, cover banner | Optional |
| Social links | LinkedIn, Instagram, website URLs, etc. | Optional |
| Skill tags | Up to 10 keyword tags (e.g., "Flutter", "UX Design") | Optional |
| Country | ISO-3166 alpha-2 code (e.g., "IN") | Optional |
Privacy flags you control: Phone and location are never exposed to other users unless you explicitly enable Show phone or Show location in your card settings. Skill tags are used for search discoverability only and are not displayed on your public card.
| Category | Details |
|---|---|
| Card-view analytics | When and how often your card is viewed; device type of viewer; referral source (QR scan, direct link, directory) |
| Saved-contact records | The username of cards you have saved to your wallet |
| Chat messages | 1:1 messages you send or receive via the in-app chat feature |
| Notification preferences | Whether you have enabled chat or save notifications |
| Device tokens | Firebase Cloud Messaging (FCM) token for push notifications |
| Consent grants | Records of field-reveal permissions you have granted or received (e.g., allowing someone to view your hidden phone number) |
If a card is set to accept inquiries, any visitor — including people who do not have a Visita account — can use the "Get in touch" form on that public card to send the card owner a message. Submitting this form sends us:
| Field | Required? |
|---|---|
| Name | Yes |
| Message | Yes |
| Email address | Optional |
| Phone number | Optional |
This information is stored so the card owner can view and respond to it (Settings → Leads), and is deleted if the card owner deletes the lead or their account. We do not use it for any purpose other than delivering it to the card owner, and a visitor submitting this form does not thereby create a Visita account or become subject to the rest of this policy as a "user" — only as the sender of that one message. Card owners can turn this form off for their card at any time.
| Source | Data received |
|---|---|
| Razorpay | Payment confirmation, transaction ID, subscription status. Razorpay processes payment-card details directly; we never receive your card number or CVV. |
| Google / Apple Sign-in (if offered in future) | Email address, display name |
We use personal data only for the purposes listed below:
| Purpose | Legal basis (DPDPA) | Legal basis (GDPR) |
|---|---|---|
| Create and maintain your account | Consent / Contract | Contract (Art. 6(1)(b)) |
| Display your card to other users and in the public directory | Consent | Consent (Art. 6(1)(a)) |
| Enable card sharing via QR code or deep links | Consent / Contract | Contract |
| Power in-app search (full-text + semantic) using your card content and skills | Legitimate interest | Legitimate interest (Art. 6(1)(f)) |
| Deliver push notifications (new messages, saves, milestones) | Consent | Consent |
| Relay "Get in touch" form submissions to the card owner | Consent (of the sender) | Consent (Art. 6(1)(a)) |
| Provide analytics on your card's reach (premium feature) | Contract | Contract |
| Process premium subscription payments | Contract / Legal obligation | Contract / Legal obligation |
| Detect abuse, spam, and security threats | Legitimate interest | Legitimate interest |
| Comply with Indian GST / tax laws (billing records) | Legal obligation | Legal obligation (Art. 6(1)(c)) |
| Respond to support, feedback, and legal requests | Legitimate interest / Legal obligation | Legitimate interest / Legal obligation |
| Execute account deletion at the end of the 30-day grace period | Legal obligation (DPDPA Art. 8) | Legal obligation (GDPR Art. 17) |
We do not sell your personal data. We do not use your data for advertising profiling.
Visita is a professional networking tool. Your card can be:
visita.app/u/[username] link.You control this toggle at any time via Settings → Privacy & visibility.
When your card is public, the following fields are visible to everyone: username, full name, profession, bio, country, avatar, cover, social links, and card style. Phone and location are visible only if you have turned on the corresponding Show toggle.
Skill tags are used internally for search ranking and are not shown on your card to other users.
We share personal data only as described below:
When your card is public, your profile is viewable by any Visita user. If you save someone's card, they may receive a notification that you have done so (this is a setting you can control).
If someone submits the "Get in touch" form on your public card (see §3.3), we share their name, message, and any email/phone they chose to include with you as the card owner so you can respond.
We use trusted third-party processors under contractual data-processing agreements:
| Provider | Role | Data shared | Country |
|---|---|---|---|
| Cloud Database Provider | Database, authentication, file storage | All account and card data | United States |
| Razorpay Software Pvt. Ltd. | Payment processing | Name, email, subscription status | India |
| Google Firebase (FCM) | Push notifications | Device token, notification payload | United States |
| OpenAI / Anthropic (AI features) | AI card writing, bio suggestions, embeddings | Card text fields only; no contact/payment data | United States |
We may disclose personal data if required by law, court order, or to protect the rights and safety of users or the public.
If Visita is acquired or merged, your data may be transferred to the new entity under the same or stricter privacy terms. We will notify you before any such transfer.
Visita is headquartered in India. Some service providers (our database provider, Google, OpenAI) process data in the United States. We rely on:
to ensure transfers outside India and the EEA meet appropriate safeguard requirements.
| Data type | Retention period | Reason |
|---|---|---|
| Account and card data | Until account deletion + 30-day grace period | Service delivery |
| Chat messages | Deleted with account (cascade) | No independent retention |
| Analytics events | Deleted with account (cascade) | Tied to your card identity |
| Push notification tokens | Deleted immediately on deletion request | Prevent ghost notifications |
| "Get in touch" form submissions (leads) | Until the card owner deletes the lead, or their account | Card owner's inbox is theirs to manage; senders can also email us to request removal |
| Billing / purchase records | 7 years from transaction date | Indian GST Act & accounting law (mandatory) |
| Anonymised aggregate statistics | Indefinitely | Cannot be re-linked to individuals |
| Inactive accounts (no login in 2 years) | We may send a re-engagement notice; data deleted 90 days later if no response | Storage hygiene |
When you request account deletion:
Billing records are retained separately as required by law and cannot be erased. Full steps for requesting deletion are on the Delete your account page.
We implement the following safeguards:
Despite these measures, no system is 100% secure. If you discover a vulnerability, please contact us at nextgeninvteam+visita@gmail.com.
Visita is intended for professional use by individuals aged 18 and above (or 13+ with verified parental consent where applicable law permits). We do not knowingly collect data from children under 13. If we discover we have done so, we will delete it promptly. If you believe a minor's data has been collected, please contact us.
The Visita mobile app does not use browser cookies. The app does store:
If we launch a web version, a separate cookie notice will apply.
Regardless of location, you have the right to:
Under the Digital Personal Data Protection Act, 2023, you additionally have the right to:
Under GDPR, you additionally have the right to:
To exercise any right, contact us at nextgeninvteam+visita@gmail.com with the subject line "Privacy Request — [Right You Are Exercising]." We will respond within 30 days (as required by DPDPA Art. 11 and GDPR Art. 12).
In compliance with the Information Technology Act, 2000, and the DPDPA, 2023, we have designated a Grievance Officer to address concerns about this policy or the handling of your personal data:
| Field | Detail |
|---|---|
| Name | [GRIEVANCE OFFICER FULL NAME] |
| Designation | Grievance Officer, Visita |
| Address | [Street, City, State – PIN Code, India] |
| nextgeninvteam+visita@gmail.com | |
| Response time | Within 30 days of receipt |
If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once it is constituted under the DPDPA.
Your Visita card may contain links to external websites (e.g., your LinkedIn or personal website). Clicking those links takes you outside the Visita app. We are not responsible for the privacy practices of third-party sites and recommend you review their policies.
Visita uses AI features to help you write bio content, suggest skills, and improve search. When you use these features:
We may update this policy as the app evolves or laws change. We will:
Continued use of Visita after the effective date of a revised policy constitutes acceptance.
For privacy questions, data requests, or concerns that are not urgent enough for a formal grievance:
Email: nextgeninvteam+visita@gmail.com
Subject line: "Privacy — [Your query]"
We aim to respond within 7 business days for general queries and within 30 days for formal rights requests.