Legal Documentation
Privacy Policy
Effective Date: August 18, 2026 · Last Updated: August 18, 2026
Issued by: NEXEL PLATFORMS PRIVATE LIMITED — owner of the Lukewarm brand (incorporated under the Companies Act, 2013; principal office: Plot 151, Sector 2, Kurukshetra, Haryana 136118).
Our Privacy Commitment
Lukewarm is committed to safeguarding your privacy. We strictly use camera, audio, and contact information to extract and organize business card data for you. We never sell your personal data or your scanned business contacts to advertisers or third parties.
01Information We Collect
We collect information to provide, maintain, and improve our AI-powered business card scanning and contact management services.
A. Account Information
When you register via email or Google OAuth, we collect your name, email address, profile photo, and secure authentication tokens.
B. Business Card Data & Images
When you capture or upload photos of business cards, our OCR and vision AI process the image to extract names, phone numbers, email addresses, job titles, companies, physical addresses, websites, and social media handles.
C. Voice Memos & Audio Recordings
If you record voice notes with Flash Scan, audio recordings are transcribed using AI to generate actionable tasks, meeting notes, and follow-up reminders.
D. Device & Permission Data
With your explicit consent, we access your device’s Camera (for card scanning and optional context selfies), Microphone (for voice notes), Photos (for card image selection), and Contacts (to optionally export contacts to your device address book).
02How We Use Your Information
- To extract and populate digital contact records from business cards.
- To transcribe voice notes and extract action items and calendar reminders.
- To sync your contacts, events, and tasks across web and mobile apps.
- To process subscriptions and verify account entitlements.
03Third-Party AI Processing & Service Providers
To deliver intelligent business card scanning, OCR, contact extraction, and voice memo transcription, we transmit data to trusted third-party service providers via encrypted channels:
- OpenAI (Vision & Audio AI): Used strictly for multimodal OCR and speech-to-text transcription. Uploaded photos, extracted contacts, and audio notes are processed ephemerally and are strictly not used by OpenAI or Lukewarm to train public models.
- Google Cloud & OAuth: Used for secure authentication, push notification delivery, and optional Google Calendar synchronization.
- Stripe: Used for secure payment processing on our web portal. We do not store raw credit card credentials on our servers.
04Data Retention, Security & Deletion Rights
Your data is encrypted in transit (TLS/HTTPS) and securely stored in encrypted database clusters.
Your Rights: You have the right to access, update, export, or permanently delete all your contacts, account data, and photos at any time.
05Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection team: