Our GDPR commitment
As a unified Agentic AI platform serving European users, InCard applies comprehensive GDPR compliance measures to ensure your personal data is protected to Europe's highest privacy standards.
Lawful processing
We process personal data only where we have a valid legal basis, including consent, performance of a contract and legitimate interests.
Transparency
Clear information about what data we collect, why we process it and what your rights are, written in plain language.
Data minimisation
We collect only the personal data necessary for the specified, legitimate purposes.
Accuracy
Personal data is kept accurate and up to date, with mechanisms to correct and update it.
Storage limitation
Personal data is retained only for as long as necessary for the purposes it was collected for.
Accountability
We demonstrate compliance through documentation, policies and regular privacy impact assessments.
Your GDPR rights
Access and portability
- Right of access: request a copy of your personal data in a structured, machine-readable format
- Right to portability: move your data to another service provider
Control and rectification
- Right to rectification: correct inaccurate or incomplete personal data
- Right to restriction: limit how we process your personal data
Consent and objection
- Right to object: object to processing based on legitimate interests or direct marketing
- Withdraw consent: withdraw your consent to data processing at any time
Erasure and complaints
- Right to erasure: request deletion of your personal data (the “right to be forgotten”)
- Complaints: lodge a complaint with a supervisory authority
Technical and organisational measures
Technical measures
- End-to-end encryption of data in transit
- Encrypted data storage with access logging
- Multi-factor authentication and access controls
- Regular security testing and vulnerability assessments
Organisational policies
- A dedicated Data Protection Officer (DPO)
- Regular data protection training for staff
- Data processing agreements with third parties
- Privacy impact assessments for new features
International data transfers
When transferring personal data outside the EU/EEA, we ensure an adequate level of protection through:
Adequacy decisions
Transfers to countries with a recognised data protection framework
Standard Contractual Clauses
Contracts approved by the European Commission that guarantee GDPR-equivalent protection
Supplementary safeguards
Additional measures including encryption and access controls
How to exercise your GDPR rights
Contact our DPO
Email: incard.biz@gmail.com
Response time: within 30 days
Verification: identity verification is required
Languages: English or Vietnamese
Supervisory authorities
EU users: contact the data protection authority in your country
Lead authority: Irish Data Protection Commission (for EU operations)
Australian users: Office of the Australian Information Commissioner
Vietnamese users: Ministry of Information and Communications
Our privacy commitment
InCard is committed to maintaining the highest data protection standards. We continuously monitor regulatory changes and update our practices to ensure ongoing GDPR compliance.
Data protection
Need detailed security documentation?
The InCard team is ready to answer your questions and provide the documents you need.