Privacy Policy

Last updated November 13, 2026

whonyou (“we”, “us”) is operated by Technology Canvas LLC, Kansas, USA. This policy explains what we collect when you use whonyou.com and what we do with it.

What we collect

• Your account email, used to send sign-in links.
• What you put on your card: name, title, organization, location, phone, email, website, LinkedIn, intro text, specialties and photo. Your card is public: anyone with your link or QR code can see it and save it to their contacts.
• Contacts shared with a card owner. If you use “Share your contact” on a Pro card, the name, email, phone, company and note you enter are sent to that card's owner and stored in their account. The card owner decides what to do with them.
• Card statistics. We count how many times a card is opened and saved, by day. These counts aren't linked to you.
• Your calendar (Pro, only if you connect one). If you connect Google Calendar or Outlook / Microsoft 365 for “Book a meeting”, we read the busy times on your primary calendar (not event titles or details) to show only your free times, and we create the meetings people book with you (plus a private “busy” hold on your other calendar if you connected two). We store the connection's access tokens encrypted. Disconnect at any time from the editor.
• Meetings booked with a card owner. If you book a meeting from a card, the name, email and note you enter are sent to the card owner and included in the calendar invite.
• Billing details for Pro, handled by Stripe. We store your Stripe customer ID and subscription status, never your card number.
• Basic technical data such as IP address and browser type, which our hosting provider (Cloudflare) processes to deliver the site, prevent abuse and keep it secure.

What we don't do

• We don't sell your data.
• We don't contact the people who view or save your card.
• We don't show ads.

Google and Microsoft user data

whonyou's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data from Google or Microsoft is used only to show your availability and create the meetings booked with you. It is never sold, used for advertising, used to train AI models, or read by people, except when you ask us for support, for security, or where the law requires it.

Who processes your data

Cloudflare hosts the site, database, photos and outgoing email. Stripe processes Pro payments. Google and Microsoft host the calendars you choose to connect. These providers only process data to run the service.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies. Our sign-up form uses Cloudflare Turnstile to block bots.

Keeping and deleting your data

Your data is kept while your account exists. You can delete your account and card at any time from the editor (“Delete my account”). This removes your card, photo and account right away; backups expire within 30 days. People who already saved your contact to their phone keep their copy.

Your rights

You can see, change or delete your information in the editor at any time. For anything else, email hello@whonyou.com.

Children

whonyou is for professional use and is not intended for anyone under 18.

Changes

If we change this policy, we'll update the date above and, for significant changes, let you know by email.