Privacy Policy

Last update: December 3, 2024

Your Privacy Matters at SuperCards!

At SuperCards, we value your privacy and take it seriously. As you use our platform to manage projects, organize tasks, and collaborate with your team, we are dedicated to ensuring that your data is handled securely and transparently.

SuperCards is built to empower individuals and organizations in achieving their project goals efficiently. Whether you’re working solo in your personal workspace or driving a team effort in a collaborative environment, protecting your information is a responsibility we prioritize.

This Privacy Policy outlines the types of data we collect, how we use it, and the options you have to manage your information.

By choosing SuperCards, you trust us with your data, and we are committed to honoring that trust. If you have any questions or concerns, we encourage you to reach out to us.

Information We Collect

Our primary purpose in collecting information is to provide a seamless and enhanced experience while using SuperCards, enabling you to manage projects, collaborate effectively, and organize your tasks. Below are the categories of information we collect:

Account Information:

When you register on SuperCards, we collect basic account details such as your name, email address or phone number, and password. This information allows you to create and manage your profile and participate in projects and task management.

2. Profile Data:

To personalize your experience, you may provide additional information such as your Profile Picture, skype id, Date of Birth and Blood Group. This helps in better collaboration and identification within teams.

3. Project and Task Content:

SuperCards allows you to create and manage projects, tasks, and time entries. We store and manage the content you input, including task descriptions, project milestones, attachments, and related data to facilitate project management.

4. Communication Data:

If you send project invitations, participate in task comments, or use the chat feature within SuperCards, we store these communications. This helps maintain a collaborative environment and provides a historical record of interactions.

5. Billing and Transaction Data:

For users on paid plans, we collect billing details, including payment method information and transaction history. This ensures proper subscription management and facilitates refunds when necessary.

6. Technical Data and Logs:

Our servers automatically collect information when you access SuperCards. This may include your IP address, browser type, device information, date and time of access, and usage patterns. This data helps us monitor system performance and improve user experience.

7. Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to understand user behavior and preferences, enhance navigation, and optimize your experience. Tools such as Google Analytics and other tracking services help us analyze how you interact with the platform.

8. Third-Party Integrations:

If you connect third-party services like Social Login, Google Drive, Jira or Git to SuperCards, we may receive information based on the permissions you grant. This allows us to enhance functionality and streamline workflows.

9. Feedback and Support:

If you provide feedback, respond to surveys, or contact our support team, we collect your name, email, and the content of your communication. This helps us address your concerns and improve the platform.

10. Usage Information:

We gather anonymized data about how users interact with SuperCards, such as features used, pages viewed, and time spent on tasks. This information helps us understand user preferences and improve the platform’s functionality.

By collecting and managing this data, we aim to provide a powerful and efficient project management tool that meets your needs while maintaining a strong commitment to protecting your privacy.

How We Collect Information

SuperCards collects information through various means to enhance your experience and ensure the platform operates efficiently. Below is a breakdown of how we gather data:

Directly from You

We collect information directly from you when you:
- Register for a SuperCards account.
- Update or add details to your profile.
- Create or join an organization, project, or task.
- Communicate with other users through messages, comments, or invitations.
Automated Tools and Technologies

Certain data is automatically collected when you use SuperCards, including:
- Log files and device information: We collect details such as your IP address, browser type, device information, and usage patterns.
- Cookies and tracking technologies: These help us understand user behavior, preferences, and improve your experience.
- Analytics tools: We use analytics to monitor platform performance, detect issues, and guide feature development.
From Third-Party Integrations

If you integrate SuperCards with external services (e.g., Social Login, Google Drive, Jira or Git), we may receive data from these third parties based on the permissions you grant. This enhances functionality and improves your workflow.

Compliance with Google API Services:

SuperCards’ use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.
User-Generated Content

We store all user-entered or uploaded content within SuperCards, including but not limited to:

a. Tasks: Task title, descriptions, due dates, assignees, file attachments, and time entries.
b. Projects: Project names, teams, team details, and project data.
c. Organizations: Organization names, logos, teams, and invited members.

d. Comments and Messages: All communication within the platform is stored to support collaboration and maintain a historical record.
Third-Party Services and Tools

SuperCards integrates with various third-party services to enhance performance, streamline workflows, and improve the overall user experience. These integrations enable seamless data management, task synchronization, and activity tracking across platforms.
- Google Drive: SuperCards allows users to connect with Google Drive for efficient file management. Users can upload files, create folders, and organize their data directly within the platform, ensuring smooth collaboration and accessibility.
- Jira Synchronization: SuperCards provides bi-directional integration with Jira, enabling users to sync tasks between both platforms. This feature allows for real-time updates, seamless task management, and ensures that teams working across tools remain aligned and productive.
- Git Synchronization: SuperCards integrates with Git repositories to track code changes and developer activities. Users can generate detailed reports on commits, including push and pull data, commit messages, and timestamps, providing valuable insights into individual contributions and project progress.
Publicly Available Sources

In some cases, we may gather information from publicly available sources to enhance user experience and for operational purposes.

Note: You always have control over the information you choose to share with SuperCards. We are committed to safeguarding your data and using it responsibly, in line with this Privacy Policy.

How We Use the Information

At SuperCards, we use the information we collect to deliver, maintain, and continuously enhance your experience with our platform. Our goal is to provide a seamless, efficient, and secure project management environment tailored to your needs. Below is a detailed overview of how we utilize your information:

Account Management and User Authentication:

We use your information to create and manage your SuperCards account, verify your identity, and ensure the security of your account and our platform.
Service Delivery and Feature Enablement:

Your data allows us to provide the core functionalities of SuperCards, including task creation, project management, collaboration, and communication with your team.
In-Platform Communication:

We facilitate communication through task comments, direct messaging, and project notifications. Additionally, we use your contact information to send important updates and service-related notifications.
Personalization and Platform Enhancement:

By analyzing how you interact with SuperCards, we can customize your experience, optimize features, and develop new tools that align with your needs and preferences.
Security and Fraud Prevention:

We use your information to monitor, detect, and prevent unauthorized access, fraudulent activities, and breaches of our terms of service, safeguarding both the platform and our users.
Legal and Compliance Requirements:

SuperCards processes personal data as necessary to comply with applicable laws, legal obligations, and regulatory requirements, ensuring lawful and ethical use of your information.
Billing and Payments:

For users with premium plans, we use your data to manage subscriptions, process payments, and handle billing inquiries.
User Support and Feedback:

We utilize your information to address support requests, resolve technical issues, and improve customer service based on your feedback.
Marketing and Promotions:

With your consent, we may send you promotional content, product updates, and special offers. You have the option to manage your communication preferences and opt out of marketing communications at any time.

SuperCards is committed to transparency and responsible use of your data, always respecting your rights and choices in how we handle your information.

Where Do We Store Your Information

At SuperCards, we prioritize the security and accessibility of your data. We use industry-leading infrastructure and tools to ensure your information is safe and available when you need it. Below is an overview of how and where we store your data:

Primary Storage on Amazon Web Services (AWS):

All user data is securely stored on AWS servers. AWS is renowned for its advanced security protocols and compliance with global standards, providing a highly secure and reliable environment for your data.
Global Content Distribution via CDN:

To enhance performance and ensure rapid content delivery, we leverage a Content Delivery Network (CDN). This allows files, images, and other resources to be distributed efficiently from servers closest to the user, ensuring fast and responsive access to the platform.
Robust Security Measures:We implement a variety of technical and organizational security measures to protect your data, including:
- Encryption: All sensitive data is encrypted both in transit and at rest.
- Regular Security Audits: We conduct routine audits to identify and mitigate potential vulnerabilities.
- Access Controls: We enforce strict access controls, ensuring only authorized personnel can access sensitive information.
  
  Your data’s security is our top priority, and we continuously monitor and update our systems to meet the highest standards of protection.

How We Share Your Information

At SuperCards, we prioritize transparency and responsibility when sharing your data. Below are the circumstances and entities with which your information may be shared, always in adherence to our commitment to data privacy and security:

Internal Teams

Your data may be shared across SuperCards’ internal teams to ensure seamless service delivery and support, including:
- Customer Support: Assisting with inquiries and resolving issues.
- Technical Teams: Maintaining platform performance and implementing feature updates.
- Marketing Teams: Delivering personalized communications and promotions.
Third-Party Service Provider
- Google API Services: Ensuring no personal data is shared
- Jira: For syncing user data, ensuring no personal data is shared
- Git: For syncing user data, ensuring no personal data is shared
Legal and Regulatory Bodies

We may disclose user data in the following scenarios:
1. Law Enforcement: Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
2. Corporate Transactions: If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
3. Other legal requirements: The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
  - Comply with a legal obligation
  - Protect and defend the rights or property of the Company
  - Prevent or investigate possible wrongdoing in connection with the Service
  - Protect the personal safety of Users of the Service or the public
  - Protect against legal liability
4. Platform Collaboration
  
  Collaboration is central to SuperCards. When you engage in tasks, projects, or events, relevant information may be shared with other users to foster effective teamwork and communication.

We are committed to sharing your information responsibly, ensuring your privacy is safeguarded at every step.

Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit a website. They play a vital role in ensuring SuperCards functions efficiently and in helping us understand how users interact with our platform.

How SuperCards Uses Cookies

Site Functionality

These essential cookies enable core features, such as:
- User Sessions: Managing login states and user preferences.
- Platform Navigation: Ensuring smooth access to different sections of the platform.
Analytics and Performance

Cookies help us analyze how users engage with SuperCards, allowing us to enhance performance and usability. We use:
- Google Analytics to collect anonymized data on user interactions, improving the user experience.
- Amplitude to gain insights into platform usage and user behavior. No personal data is shared with Amplitude.
Marketing and Advertising

Cookies enable us to make our advertising more relevant. We use:
- Facebook Pixel to measure ad performance and provide personalized ads based on user actions.
- LinkedIn Insight Tag to track ad effectiveness and understand user interactions after engaging with LinkedIn ads. Marketing and Advertising
  Cookies enable us to make our advertising more relevant. We use:

Third-Party Cookies

Google Analytics: Collects anonymized data to help us analyze user behavior and improve platform functionality.
Amplitude: Provides insights into user activity without accessing personal data.
Facebook Pixel & LinkedIn Insight Tag: Help us tailor advertisements and assess their effectiveness.

Managing and Disabling Cookies

Initial Consent: On your first visit to SuperCards, you will see a pop-up that allows you to accept all cookies or customize your preferences.
Browser Settings: Most browsers offer options to manage or block cookies. However, blocking essential cookies may impact your access to certain platform features.
Cookie Preferences: You can review and adjust your cookie settings at any time through the cookie settings section on our website.

We are committed to respecting your preferences and ensuring transparency in how cookies are used to enhance your experience on SuperCards.

Data Retention Policy

Retention Period

SuperCards retains user data, including but not limited to names, email addresses, profile pictures, and any content or information created on the platform, for an indefinite period. This ensures continuity and a seamless experience. User data will remain stored until the user opts to delete their account. Upon account deletion, SuperCards will follow its data retention policies to remove the user’s information from active databases.

Soft-Delete Protocol

When users delete items such as tasks, projects, documents, or other data from SuperCards, these items are not permanently removed immediately. Instead, they enter a 30-day archival period as a precaution against accidental deletions or unwanted changes. During this grace period:

Recovery: Users can restore their deleted data within the 30-day window.
Permanent Deletion: After 30 days, the data is automatically and permanently erased from our systems.

Immediate Deletion Requests

Users can request immediate and complete deletion of archived data within the 30-day window by contacting contact@itconquest.com. Upon receiving the request, we will process it and permanently delete the data from our systems within 15 working days.

SuperCards is committed to safeguarding your data and providing flexibility in managing your information.

Account Deletion Policy

SuperCards is committed to respecting your data privacy and providing flexibility in managing your account. Below is a detailed outline of the account deletion process and its implications for different workspaces:

Personal Workspace Deletion

When you delete your account from SuperCards, the platform follows a soft-delete policy for all data associated with your personal workspace, including:

Personal details (name, email address, profile picture, etc.)
Tasks, projects, documents, notes, and any other data you have created or stored.

The data will remain archived for a 30-day grace period to safeguard against accidental deletions or unauthorized account access. During this time, you can request recovery of your account and data. After the 30-day period:

Permanent Deletion: All data will be permanently removed from SuperCards’ databases, rendering it unrecoverable.
New Account: If you choose to return after the grace period, you will need to create a new account and start afresh.

Organization Workspace Data

For data you have contributed to an Organization Workspace, the following applies:

Data Retention: Tasks, projects, comments, notes, and other contributions remain intact within the Organization.
Anonymization: Your personal identifiers (name, email) will be removed and replaced with a generic label such as “Removed User.” This ensures organizational continuity while maintaining your privacy.
Account Linkage: Only non-personal, unique account IDs are retained to link contributions to the Organization, ensuring both data privacy and operational coherence.

SuperCards ensures that your rights over your data are respected while supporting the needs of collaborative environments. If you need further assistance, please contact contact@itconquest.com.

Security Measures

At SuperCards, the security and protection of your data are our highest priorities. As we scale and evolve, we remain steadfast in implementing best-in-class security practices to safeguard the information you entrust to us. Below are the key measures we have in place to ensure data security and privacy:

Data Encryption

- All data in transit is encrypted using advanced encryption protocols to prevent unauthorized access and ensure data confidentiality. This guarantees that your sensitive information is protected as it moves between your devices and our servers.
Secure Hosting
- SuperCards is hosted on Amazon Web Services (AWS), a globally recognized cloud provider known for its rigorous security infrastructure.
- AWS offers robust data protection mechanisms, including
  - Network firewalls to control access and protect against external threats.
  - Data encryption at both the network and storage levels.
- In combination with our additional security layers, this ensures a comprehensive and secure environment for your data.
Regular Backups
- We conduct frequent and automated backups of all user data to prevent data loss and ensure continuity.
- These backups are stored in highly secure environments, maintaining data integrity and accessibility even in the event of unforeseen incidents.
Access Control
- Access to user data is restricted to authorized personnel only and is granted strictly on a need-to-know basis.
- We have implemented stringent internal protocols to monitor, control, and audit access, ensuring that your data remains confidential at all times.

By adopting these measures, SuperCards is committed to providing a secure and reliable platform, ensuring your peace of mind as you collaborate and manage your projects. If you have any questions or need further assistance regarding our security practices, feel free to reach out to contact@itconquest.com .

Users’ Rights

At SuperCards, we value and respect the rights of our users regarding their personal data. To empower users and ensure transparency, we provide the following rights and mechanisms for managing your data:

Right to Access
- Users can access and view their personal data directly through the platform’s interface. This includes information such as name, email address, and any profile details.
- For assistance or inquiries regarding data access, please contact our support team at support@supercards.com.
Right to Rectification
- Users can update or modify their personal data, including their name, profile picture, and email address, through the Profile Settings section.
Right to Erasure (Right to be Forgotten)
- You can delete your account directly within the Profile Settings.
- Upon deletion, all personal data associated with your Private Workspace will be permanently removed from our database.
- For data linked to Organization Workspaces, personal identifiers such as your name and email will be anonymized and displayed as “Removed User” to maintain organizational continuity.
Right to Data Portability
- Users can export their data, such as tasks and projects, in a structured and commonly used format.
- If requested, and where technically feasible, we can assist in transmitting your data to another platform or service provider.
Right to Withdraw Consent
- You can withdraw consent for specific data processing activities, such as receiving marketing emails, through the Profile Settings.
- If you wish to withdraw consent for all data processing in line with our Privacy Policy, the only way to do so is by deleting your account.
Right to Lodge a Complaint
- If you believe your data is being processed unlawfully or not in accordance with our policies, you have the right to file a complaint with a supervisory authority.

Exercising Your Rights

Most of these rights, such as accessing, editing, or deleting data, can be managed directly within the platform. If you encounter any issues or need assistance, please reach out to contact@itconquest.com. We are committed to addressing your concerns and ensuring your rights are respected in compliance with data protection laws.

International Data Transfers

At SuperCards, we operate on a global scale, and as part of providing our services, your data may be transferred to, stored in, or processed in countries other than your country of residence. This includes the United States, where our primary data centers are located.

Commitment to Data Protection

We are committed to safeguarding your personal information, regardless of where it is processed. To ensure secure and lawful data transfers, we:

Utilize Standard Contractual Clauses (SCCs) approved by the European Commission.
Partner with cloud service providers that maintain robust security measures and comply with global data protection standards.
Adhere to applicable data protection regulations, including the General Data Protection Regulation (GDPR).

European Economic Area (EEA), Switzerland, and UK Residents

For users in the EEA, Switzerland, or the United Kingdom:

While we strive to maintain a consistent level of data protection, please note that the data protection laws in the countries where your data is processed, including the U.S., may differ from those in your region.
Despite these differences, SuperCards is committed to applying the highest standards of data protection and privacy.

Age Gate & Children’s Privacy

At SuperCards, we prioritize the privacy and safety of all users, particularly children. Our platform is intended for individuals who meet the following age criteria:

Minimum Age: You must be at least 16 years old or the age of consent for data processing in your country, whichever is higher.
Parental Consent Requirement: If you are under this age limit, you may only use SuperCards with verifiable parental or guardian consent.

By using SuperCards, you confirm that you meet the age requirement or have obtained the necessary consent.

Policy Enforcement

If we discover that a user under the minimum age has registered without proper parental or guardian consent, we will take immediate steps to:

Remove any personal information provided by the user.
Terminate the account to ensure compliance with data protection regulations.

SuperCards reserves the right to modify eligibility criteria and restrict access to the platform as needed.

Changes to This Privacy Policy

At SuperCards, we are committed to continuously improving our platform and services. As part of this commitment, our Privacy Policy may be updated from time to time.

Policy Update Rights

- We reserve the right to amend this Privacy Policy at any time and for any reason.
Notification of Changes
- When changes are made, we will provide clear and timely notice by:
  - - Displaying a notification on the SuperCards platform, or
    - Sending an email notification to registered users.
User Consent
- By continuing to use SuperCards after being notified of changes, you acknowledge and agree to the updated Privacy Policy.
- If you do not agree with the changes, you have the right to stop using our services and should cease use immediately.

Legal Jurisdiction

Any disputes or claims arising out of or in connection with this Privacy Policy, or the breach thereof, shall be governed by and construed in accordance with the laws of Canada. Both parties agree to submit to the exclusive jurisdiction of the courts located within Canada and waive any objections related to jurisdiction, venue, or inconvenient forum.

This ensures that all legal matters related to SuperCards are handled under Canadian law.

Data Processor

SuperCards is operated by IT Conquest Inc., a company registered in Canada.

Legal Address: 60 Atlantic Avenue, Suite 200, Toronto, Ontario, M6K 1X9, Canada

Contact Email: contact@itconquest.com

If you have any questions, concerns, or requests regarding our Privacy Policy or your personal data, feel free to contact us!