Your cards stay under your control

Information you provide

Card Shark processes the business-card photographs and optional meeting notes you choose to upload. It extracts contact details such as names, companies, job titles, email addresses, telephone numbers, websites, and mailing addresses. You review and may edit this information before anything is saved.

Connected accounts

When you connect Google or Microsoft, Card Shark receives authorization tokens needed to perform the actions you request. Those tokens are encrypted in secure, HTTP-only cookies. Card Shark uses delegated access to read and write your contacts, detect potential duplicates, and create Card Shark archive files in your Google Drive or OneDrive.

Image processing and Gemini

Uploaded photographs and optional notes are sent to Google's Gemini Developer API to extract contact information. Card Shark currently uses the free Gemini API tier. Under Google's terms for unpaid services, Google may use submitted content and generated responses to provide, improve, and develop its products and machine-learning technologies, and human reviewers may process that data. Do not upload confidential or highly sensitive information. Card Shark does not use uploaded cards for advertising.

How information is used

• Extract and display contact information for your review.
• Find likely duplicates in the connected contact account.
• Create or update contacts only after your approval.
• Create card-photo and CSV archives in the connected cloud account.
• Maintain the security and reliability of the service.

Sharing and sales

Three Rivers Solutions, LLC does not sell business-card information or connected-account data. Information is shared with service providers only as needed to deliver Card Shark, including Google, Microsoft, and the application's hosting provider.

Retention and deletion

Card Shark processes each uploaded photograph in memory for the extraction and approval request and does not write an additional copy to its own application database or file storage. After approval, the original photographs, extracted fields, status, event tag, and CSV or spreadsheet archive are stored in the Google Drive or OneDrive account you selected. Contact records are stored in Google Contacts or Microsoft Outlook. Those copies remain until you delete them under the connected account's retention settings. You can revoke Card Shark's account access and follow the steps on the data-deletion page.

Your privacy rights

Depending on where you live, including under the GDPR or CCPA/CPRA, you may have rights to request access to, correction of, export of, or deletion of personal information associated with your use of Card Shark, and to object to or restrict certain processing. Most Card Shark data is available directly in your connected Contacts and cloud-drive account. Requests can also be submitted through the support page. We may need to verify your identity before completing a request.

Age restriction

Card Shark is intended for business users and is not directed to children under 16. Users under 16 may not use the service.

Your responsibilities

Only upload business cards and personal information you are authorized to process. Privacy rights vary by location, and you are responsible for using exported contact information lawfully.

Changes and contact

This policy may be updated as Card Shark evolves. Material changes will be reflected on this page. Questions can be submitted through the support page.