Privacy Policy

Digica operates the Services. For privacy inquiries: legal@digica.app. For general support: support@digica.app.

Mailing address: 9131 Keele Street, Vaughan, ON L4K 0G7, Canada.

This policy applies to personal information Digica processes in connection with the Services, including supported third-party integrations. It does not govern a third party's separate handling of information in services that Digica does not control.

• Our marketing and information website, including pages viewed without an account
• Our online store and checkout flows
• Our mobile application
• Digital profile tools and public profile pages you create or view
• Contacts saved by a Digica account holder, including contact information about people who may not have a Digica account
• Subscriptions, orders, customer support, and related communications
• Digica integrations, including Digica's ChatGPT integration

Depending on how you use the Services, Digica may process:

• Account and profile data: name, email address, phone number, Digica account code, authentication information used by Digica account systems, profile content, profile images, links, business presentation fields, and preferences.
• Saved contact data: a contact's name and, when supplied by the account holder, email, phone, company, job title, notes, address, website, tags, and profile association.
• Commercial information: Digica Marketplace orders, products, totals, payment state, fulfillment state, shipping details where required, subscriptions, and payment or checkout references. Raw payment-card details are handled through the payment-provider checkout environment, not through Digica's ChatGPT tools.
• Analytics and usage data: profile view/share counts and event dates; where enabled on Digica's website, a session identifier, page or action category, performance data, and campaign attribution values stored for the browser session.
• Security and operational data: timestamps, tool or request category, result or error class, latency, bounded correlation or operation identifiers, and information needed to prevent abuse. Infrastructure may also process IP address and user-agent information for security, authentication, rate limiting, or ordinary request handling.
• Communications: messages you send to Digica Support or legal/privacy channels and records needed to handle the request.
• Marketing preferences: whether you opt in or out of promotional communications where offered.

Digica uses personal information for the purposes connected to the service or request, including to:

• Authenticate and link accounts and provide the Digica features you request
• Create, retrieve, update, share, and manage Digica profiles and profile widgets
• Store and retrieve contacts at the direction of the Digica account holder
• Provide aggregate profile analytics such as views and shares
• Show Marketplace products and provide the connected account's order status
• Process and fulfill transactions performed through Digica's normal commerce surfaces
• Provide customer support and respond to privacy or security requests
• Prevent fraud, abuse, unauthorized access, and reliability failures
• Measure and improve Digica service performance where measurement is enabled
• Comply with applicable legal obligations and enforce our terms

When you connect Digica to ChatGPT, OpenAI facilitates the interaction and Digica uses OAuth authorization to associate permitted requests with your Digica account. Digica receives the task-specific tool inputs needed for the action and returns the relevant tool result through the integration.

Depending on what you ask, the integration can access account/plan information, owned profiles and profile fields, saved contacts, aggregate profile analytics, existing profile widgets, public Digica Marketplace products, and the connected account's order status and order item/amount details. It can also create a profile, update supported profile fields, create a contact, or update supported fields on an existing widget when you request those actions.

The current integration does not retrieve or store your full ChatGPT conversation history, does not ask for precise device GPS location, does not send email/SMS/push messages, does not transfer NFC ownership, does not delete your Digica account, does not cancel or change subscriptions, does not issue refunds, and does not initiate or complete checkout or payment.

Digica's ChatGPT tools do not request or return passwords, one-time authentication codes, API keys, access or refresh tokens, bank credentials, raw payment-card numbers/CVC, government identifiers, or health information as part of the supported V1 tool schemas. Do not put such information into free-text profile, contact, widget, or support fields.

OpenAI separately determines how it handles information within ChatGPT under OpenAI's own terms and privacy policies. Digica does not control OpenAI's separate handling of your ChatGPT conversation.

Information is made available only as needed for the Services or a user-requested action. Relevant recipients or service-provider categories can include:

• OpenAI when you use Digica through ChatGPT, so the requested tool result can be returned to your ChatGPT session
• Hosting and infrastructure providers used to operate Digica
• Email delivery infrastructure used to route support or service communications
• Stripe for Digica payment and checkout processing where applicable
• Shipping and logistics providers when needed to deliver physical products
• Professional advisers or authorities when reasonably necessary or legally required
• A successor entity in a permitted business transaction

Public profile information and public Marketplace product information are intended to be displayed publicly. Saved contacts, account data, and owned-order information are private and are not public profile content.

Digica uses Stripe for payment processing where Digica checkout is offered. Payment-card entry occurs in the authorized checkout/payment environment. Digica may receive transaction and order metadata such as checkout references, payment state, amounts, and provider identifiers needed to operate the commerce system.

Digica's current ChatGPT integration does not expose a purchase or checkout tool and does not collect raw card numbers, expiry dates, CVC/CVV, PINs, or bank credentials through the integration.

Digica's website uses browser storage where needed for service behavior. When Digica website analytics is enabled, the site can create a session identifier in session storage and retain campaign attribution values for that browser session. Analytics events can include page/action category and web performance data. The current website analytics client honors the browser Do Not Track setting.

Other parts of the Services may use necessary cookies or storage for authentication, security, and preferences. Your browser can provide controls for cookies or site storage, but disabling necessary storage can prevent some features from working.

Information may be processed in Canada and in other countries where Digica's service providers operate. Privacy and data-protection rules can differ between jurisdictions. Contact us if you have a question about the service providers or locations involved in a specific Digica processing activity.

Retention depends on the category and the reason it is kept. Account, profile, contact, and related workspace data generally remain while the account or record is active and are deleted, anonymized, archived, or otherwise handled when the relevant Digica deletion process is completed, subject to retained categories described below.

• Digica account deletion removes current OAuth tokens/grants, sessions, contacts, public profile/card/media mappings, and user/profile-linked analytics handled by the account-deletion workflow, and anonymizes the current user record.
• For the ChatGPT integration, create-profile and create-contact idempotency records are retained for seven days so an ambiguous retry does not create a duplicate, then become eligible for replacement/removal.
• OAuth authorization credentials have bounded configured security lifetimes and can be revoked; disconnecting/revoking the integration does not itself delete the underlying Digica account.
• Current production backup generations use a 14-day retention window. A deleted record can therefore remain in an older backup until that backup generation ages out.
• API reverse-proxy access logs are configured to rotate for up to seven days and filter authorization/cookie headers and token-like query values. Application/container logs are size-rotated rather than kept indefinitely.
• Order, refund, billing/payment, legal/contract, security/audit, and referral/reward accounting records currently have no universal automatic time-based expiry. They can remain after account deletion until an authorized retention/deletion rule or applicable business, accounting, security, or legal requirement permits removal.
• Server-side analytics that are not removed by the account-deletion workflow do not currently have a universal automatic time-based expiry; browser-session analytics identifiers and campaign attribution values end with the browser session.
• Website support submissions are delivered to Digica's support email system and are not stored in a dedicated support-inquiry database table by the contact route. Delivered email remains subject to the mailbox/provider deletion and retention settings.

Digica does not claim that every retained category is erased immediately when an account or integration is disconnected. Where applicable law requires a specific deletion or retention outcome, Digica will apply that requirement to the relevant request and record category.

Digica uses administrative, technical, and organizational measures designed to protect personal information. Operational logging is designed to exclude authentication secrets and raw ChatGPT prompts by default. API access logs are configured to remove authorization/cookie headers and token-like query values and to rotate for up to seven days; application/container logs are size-rotated. Digica may retain other bounded operational information needed for debugging, abuse prevention, reliability, and security as described in the retention section. No system can guarantee absolute security.

You can update supported profile and business presentation fields through Digica, and the ChatGPT integration can update only the supported fields and resources for which you have granted permission. You can disconnect or revoke the integration separately from your Digica account.

For access, correction, deletion, or another privacy request, contact legal@digica.app. We may need to verify your identity before acting on a request. General product or order support is available at support@digica.app. Disconnecting Digica from ChatGPT is not the same as deleting your Digica account.

If you save a contact or otherwise provide personal information about another person, you are responsible for having an appropriate reason and any permission required to provide that information to Digica. Digica uses saved contact information to provide the private contact-management function requested by the account holder and does not expose those contacts as public profile data.

The Services are not directed to children under the age where consent is required in their jurisdiction. Digica's ChatGPT integration is designed for general-audience Digica networking and commerce-support functions and does not intentionally solicit children's sensitive information.

We may update this Privacy Policy when the Services or our data practices change. We will post the updated version on this page and revise the “Last updated” date. Additional notice will be provided where required.

Privacy and data requests: legal@digica.app. General support: support@digica.app. Mailing address: 9131 Keele Street, Vaughan, ON L4K 0G7, Canada.