Privacy policy
Last updated 19 October 2026.
This policy explains how SuperBound AI ("SuperBound", "we") handles personal data when you visit superbound.ai, join early access, or use the SuperBound service on WhatsApp. We wrote it to be read, not skimmed.
Who this covers
- Customers: people and companies who use SuperBound to capture contacts and follow up.
- Contacts: people whose visiting cards our customers capture, and who may open a personal page our customer shares with them.
- Visitors: people who browse this website or fill in the early access form.
What we collect
- From customers: name, WhatsApp number, email, company, the messages, photos and voice notes you send to SuperBound, and the settings and integrations you connect (such as Salesforce, HubSpot or Google Sheets).
- About contacts, on our customer's instruction: details printed on the visiting card, company information from public sources, notes the customer adds, and activity on the personal page shared with them (for example when it was opened and which sections were viewed). Personal pages never ask contacts to enter personal details.
- From visitors: what you enter in the early access form, and basic technical data such as browser type and pages visited.
How we use it
- To provide the service: reading cards, saving contacts to the customer's CRM or sheet, drafting follow-ups, building personal pages and sending alerts and reminders to the customer.
- To set up early access and contact you about it on WhatsApp or email.
- To keep the service secure, fix problems and improve it.
We do not sell personal data, and we do not use contact data for our own marketing.
Roles under India's DPDP Act
For contact data, our customer decides why and how it is processed, and SuperBound processes it on the customer's behalf. Customers are responsible for having a lawful basis to follow up with the people they meet. For customer and visitor data, SuperBound decides how it is used, as described here.
Sharing
We share data only with service providers that help us run SuperBound (such as hosting, messaging and AI processing providers), with the CRM or tools the customer connects, or where the law requires it. Providers may process data outside India with appropriate safeguards.
Retention and deletion
We keep data while the customer's account is active and delete it within a reasonable period after the account closes, unless the law requires us to keep it longer. Contacts can ask the customer, or us, to delete their data, and we will act on it.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent where we rely on it. Contact us through the early access page or the details on this site and we will respond within a reasonable time.
Security
We use encryption in transit, access controls and limited data collection to protect personal data. No system is perfectly secure, and we will notify affected people and authorities of a breach where the law requires.
Changes
We will update this page when our practices change and show the date at the top.