Privacy Policy

Orange Tree Apps, LLC d/b/a L-Card

Effective Date: September 13, 2026

Last Updated: September 13, 2026

Orange Tree Apps, LLC, doing business as L-Card (“Orange Tree Apps,” “L-Card,” “Company,” “we,” “us,” or “our”), respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you interact with L-Card websites, mobile applications, web applications, software, digital business cards, digital portfolios, digital resumes, enterprise services, NFC-related services, Lead Capture, Lead Marketing, and other products and services we provide.

Collectively, we refer to these as the “Services.”

This Privacy Policy also explains the privacy choices and rights that may be available to you under applicable law.

L-Card does not sell the personal information of its Users or customers.

Please read this Privacy Policy carefully.

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent for particular processing activities, we will request that consent separately.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information that Orange Tree Apps collects or processes through:

L-Card websites;
L-Card mobile applications;
L-Card web applications;
L-Card Pro;
L-Card Enterprise;
digital business cards;
digital portfolios and digital resumes;
contact-sharing and contact-collection features;
business card scanning and OCR functionality;
QR-code and NFC-enabled services;
Lead Capture services;
Lead Marketing services;
customer support;
sales and demonstrations;
marketing and events;
enterprise and organizational accounts;
integrations and connected services;
purchases of L-Card products;
communications with Orange Tree Apps; and
other Services that reference this Privacy Policy.

This Privacy Policy does not govern third-party websites, applications, platforms, or services that maintain their own privacy policies.

Additional privacy or data-processing terms may apply to enterprise customers, government customers, international customers, or customers subject to separate written agreements.

2. OUR ROLE WITH PERSONAL INFORMATION

Depending on the circumstances, Orange Tree Apps may process personal information in different capacities.

Information We Control

When we determine why and how personal information is processed, such as information used to manage L-Card accounts, process purchases, secure our systems, operate our websites, or communicate with customers, Orange Tree Apps generally acts as a business or controller of that information.

Information We Process for Customers

When an enterprise, organization, or other customer uses L-Card to upload, manage, collect, store, or process information on its behalf, Orange Tree Apps may act as a service provider or processor.

In those situations, the customer may determine the purposes and means of processing, and requests concerning customer-controlled information may need to be directed to that customer.

Separate data-processing agreements may apply.

3. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

The information we collect depends on how you interact with L-Card and which Services you use.

We may collect the following categories of information.

A. Account and Identity Information

This may include:

name;
username;
password or authentication credentials;
profile photograph;
account identifier;
job title;
profession;
employer or organization;
department;
business name;
account type; and
other profile information.

Passwords are intended to be maintained in protected form and are not intended to be accessible as plain-text credentials.

B. Contact Information

This may include:

email address;
business email address;
telephone number;
mobile telephone number;
business address;
mailing address;
social-media identifiers;
website address; and
other contact information.

C. Digital Business Card, Portfolio, and Resume Information

Information Users choose to include in L-Card products may include:

name;
photograph;
professional biography;
employment information;
education;
certifications;
qualifications;
skills;
business information;
social-media links;
websites;
videos;
images;
galleries;
testimonials;
product or service information;
calls to action;
payment links;
appointment links; and
other content selected by the User.

Some information included on a digital card, digital resume, or digital portfolio is intentionally designed to be shared with other people.

Users should therefore avoid placing confidential, highly sensitive, or unnecessary personal information on publicly accessible digital cards or portfolios.

D. Contacts and Networking Information

When you use contact-sharing, contact-collection, business-card scanning, or similar features, we may process information such as:

names;
company names;
job titles;
telephone numbers;
email addresses;
mailing addresses;
business card images;
notes;
contact history; and
information voluntarily provided by a person accepting or responding to a digital card.

E. Business Card Scanning and OCR Information

If you use L-Card’s business card scanning or optical character recognition features, we may process images of business cards and information extracted from those images.

This may include names, companies, titles, telephone numbers, addresses, email addresses, websites, and other information displayed on the scanned card.

F. Transaction and Commercial Information

When you purchase a subscription, license, NFC product, or other Service, we may collect:

products or Services purchased;
subscription information;
billing history;
transaction identifiers;
invoice information;
shipping information;
payment status;
promotional or coupon information; and
related commercial records.

Payment-card information may be processed directly by authorized payment processors.

Orange Tree Apps does not need to store complete payment-card numbers when payment information is handled directly by a payment processor.

G. Device and Technical Information

When you access the Services, we may automatically collect information such as:

IP address;
browser type;
operating system;
device type;
device identifiers;
application version;
language;
mobile carrier;
referring URL;
pages viewed;
timestamps;
session information;
application events;
error information;
diagnostic information; and
other technical data.

H. Usage and Analytics Information

We may collect information about how the Services are used, including:

features used;
pages visited;
digital card views;
QR-code interactions;
link clicks;
videos watched;
gallery views;
calls to action;
sharing activity;
contact activity;
campaign interactions;
session duration;
application usage;
general engagement information; and
performance information.

Depending on the Service, L-Card may provide some of this information to the applicable account holder or organization as analytics.

I. Device Permissions

With your permission, the L-Card mobile application may request access to device features such as:

camera;
photo library;
contacts;
notifications; and
other device functionality necessary to provide requested features.

You can generally manage these permissions through your device settings.

Disabling a permission may prevent certain features from functioning.

J. Location Information

We may process general location information inferred from information such as an IP address.

Certain features may request access to more precise device location information when location is necessary to provide the requested feature.

Where device permission is required, you may control location access through your device settings.

K. Communications and Customer Support

If you contact us, we may collect:

your name;
email address;
telephone number;
organization;
correspondence;
support requests;
attachments;
feedback;
survey responses; and
other information you voluntarily provide.

L. Marketing and Sales Information

If you request information, attend an event, schedule a demonstration, communicate with our sales team, or interact with L-Card marketing, we may collect:

contact information;
organization information;
product interests;
communication preferences;
event participation;
marketing interactions;
campaign engagement; and
sales-related communications.

4. LEAD CAPTURE AND LEAD DATA

Certain L-Card Services provide customers with information concerning individuals, businesses, organizations, or potential prospects.

Lead Data is separate from personal information belonging to L-Card Users and customers that is collected through their L-Card accounts. L-Card does not sell its Users’ or customers’ account information, contact information, digital card information, private contacts, or other personal information as Lead Data.

Depending on the Service, Lead Data may be derived from or generated using:

publicly available information;
licensed data;
third-party data providers;
business information;
online activity or intent signals;
search-related signals;
customer-defined targeting criteria;
geographic information;
data enrichment;
modeled or inferred information; and
other lawful sources.

We refer to this information collectively as “Lead Data.”

Lead Data may include, depending on availability and the applicable Service:

name;
business or organization name;
professional information;
personal and business contact information;
geographic information;
industry information;
business characteristics;
potential interest or intent categories;
search or behavioral signals;
business attributes; and
other prospect-related information.

Not every category is available for every lead.

Lead Data may be supplied by third-party data providers and may change over time.

L-Card does not represent that every piece of Lead Data is independently collected directly from the individual to whom it relates.

5. INDIVIDUAL SEARCH AND BUSINESS SEARCH LEAD CAPTURE

L-Card may provide Services designed to identify individuals or businesses that appear to demonstrate potential interest in particular products, services, industries, or subjects.

Customers may configure campaigns using factors such as:

keywords;
geographic areas;
industries;
business characteristics; and
other targeting parameters.

The presence of a person or business in Lead Data does not necessarily mean that the person or business:

has communicated directly with L-Card;
has requested contact from a particular L-Card customer;
has agreed to purchase a product;
has consented to every form of marketing communication; or
will respond to a marketing communication.

Customers are responsible for determining whether and how they may lawfully use Lead Data.

L-Card User account data is not placed into the Lead Capture database merely because an individual or organization uses L-Card.

6. LEAD MARKETING SERVICES

L-Card may provide marketing services that help customers communicate with or market to prospective customers through supported channels.

Depending on the customer’s selected Services, this may include email, social media, CRM-related workflows, campaign automation, or other marketing technologies.

In providing these Services, Orange Tree Apps may process Lead Data and customer-provided campaign information for purposes including:

creating campaigns;
identifying intended audiences;
preparing communications;
delivering or facilitating marketing;
campaign administration;
tracking campaign performance;
maintaining suppression information;
measuring engagement; and
improving Service performance.

Customers remain responsible for their offers, claims, marketing content, targeting instructions, and compliance with laws applicable to their communications, except where Orange Tree Apps expressly assumes a particular obligation under a written agreement or applicable law.

L-Card does not use its Users’ private account information or private contact lists as a source of Lead Data for sale to other customers.

7. SOURCES OF PERSONAL INFORMATION

We may obtain personal information from:

Directly From You

For example, when you:

create an account;
build a digital card;
purchase a subscription;
upload content;
scan a business card;
contact support;
request a demonstration;
complete a form;
participate in an event; or
communicate with us.

From Other Users

Another L-Card User may provide information about you when exchanging contacts, scanning a business card, inviting you to connect, or using organizational account features.

From Organizations

Employers, businesses, government agencies, associations, schools, or other organizations may provide information to establish or manage L-Card accounts for their personnel.

Automatically

We may collect technical, usage, device, cookie, and analytics information when you interact with our Services.

From Service Providers and Business Partners

We may receive information from vendors that assist with payments, hosting, analytics, communications, fraud prevention, customer support, marketing, CRM functionality, security, or other business operations.

From Data Providers and Public Sources

For Lead Capture and related Services, we may receive information from data providers, publicly available sources, business directories, licensed sources, data partners, and other lawful sources.

8. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

Provide the Services

Including to:

create and manage accounts;
generate and display digital cards;
provide digital portfolios and resumes;
enable card sharing;
enable contact collection;
process business card scans;
provide OCR;
operate QR and NFC functionality;
provide Lead Capture;
provide Lead Marketing;
provide enterprise functionality;
process purchases;
ship physical products; and
provide customer support.

Operate and Improve L-Card

We may use information to:

understand product usage;
troubleshoot;
perform analytics;
develop new features;
improve existing features;
test systems;
maintain infrastructure;
optimize performance; and
improve user experience.

Protect Our Services

We may process information to:

authenticate Users;
prevent fraud;
detect misuse;
investigate security incidents;
enforce our Terms of Use;
protect Users;
maintain system integrity; and
protect Orange Tree Apps and third parties.

Communicate With You

We may send:

account communications;
security notifications;
transaction confirmations;
subscription information;
service announcements;
support responses;
product updates;
administrative notices; and
other Service-related communications.

Marketing L-Card

Subject to applicable law and your choices, we may use contact information to communicate about:

L-Card products;
new features;
offers;
promotions;
demonstrations;
events;
educational information; and
other Company news.

You may unsubscribe from promotional emails using the unsubscribe mechanism provided in those communications.

Even if you opt out of marketing, we may continue sending non-promotional communications necessary to administer your account or Services.

Demonstrations, References, and Customer Examples

From time to time, L-Card may display or share examples of actual L-Card digital business cards, portfolios, resumes, designs, or similar customer-created materials for purposes such as:

demonstrating L-Card functionality;
responding to requests for examples;
showing prospective customers representative card designs;
presentations;
sales demonstrations;
customer galleries;
training;
case studies; and
other legitimate promotional or reference purposes.

L-Card will use identifiable actual customer or User cards for promotional, reference, testimonial, or demonstration purposes only where the User, customer, or applicable Organization has authorized such use or where we otherwise have an appropriate legal right to use the material.

Providing an L-Card account does not, by itself, mean that a User’s card will automatically be used as a public marketing example.

Where practical, a User or customer may contact us to request that an identifiable sample card no longer be used in future L-Card promotional materials, subject to existing contractual permissions, materials already distributed, and applicable law.

Legal and Compliance Purposes

We may process information to:

comply with applicable law;
respond to lawful government requests;
respond to subpoenas or court orders;
establish or defend legal claims;
investigate violations;
enforce contracts;
satisfy tax and accounting obligations; and
protect legal rights.

9. LEGAL BASES FOR PROCESSING

Where laws such as European Union or United Kingdom data-protection laws require a legal basis for processing, we may rely on one or more of the following:

performance of a contract;
steps requested before entering into a contract;
legitimate interests;
compliance with legal obligations;
consent; and
other legal bases available under applicable law.

Our legitimate interests may include providing and improving the Services, securing our systems, preventing fraud, supporting customers, administering our business, and conducting appropriate business-to-business marketing.

Where processing is based on consent, you may withdraw consent subject to applicable law.

Withdrawal does not affect processing that was lawful before withdrawal.

10. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies, pixels, tags, software development kits, local storage, analytics technologies, and similar technologies.

These technologies may be used to:

maintain sessions;
remember preferences;
authenticate Users;
secure the Services;
understand usage;
measure performance;
analyze website traffic;
improve Services;
measure marketing effectiveness; and
support advertising or marketing where permitted.

Depending on your jurisdiction and the technologies used, you may be provided with cookie controls or other consent and opt-out mechanisms.

Browser settings may also permit you to block or delete certain cookies.

Blocking certain technologies may affect Service functionality.

11. GLOBAL PRIVACY CONTROL AND OPT-OUT PREFERENCE SIGNALS

Where required by applicable law and technically applicable to the Services, we will process recognized browser-based opt-out preference signals, including Global Privacy Control where legally required.

The effect of such a signal may depend on the browser, device, jurisdiction, and nature of the processing involved.

12. HOW WE DISCLOSE PERSONAL INFORMATION

Orange Tree Apps does not sell L-Card User or customer personal information.

We may disclose personal information where reasonably necessary to operate the Services or as otherwise described below.

Service Providers and Processors

We may disclose information to providers supporting:

cloud infrastructure;
hosting;
data storage;
cybersecurity;
payment processing;
billing;
shipping and fulfillment;
email delivery;
communications;
customer support;
CRM services;
analytics;
application development;
authentication;
fraud prevention;
data processing;
marketing technology; and
professional services.

These providers process information for legitimate operational purposes and may be subject to contractual or other appropriate restrictions.

Enterprise Customers and Organizations

If your account is provided or administered by an Organization, we may disclose appropriate account, administrative, usage, or organizational information to authorized administrators consistent with the applicable agreement and law.

Other Users and People You Choose to Share With

When you share an L-Card, digital portfolio, digital resume, contact record, or other information, recipients receive information you choose to make available.

Authorized Customer Examples

We may share actual digital cards, portfolios, resumes, or related materials as examples, references, demonstrations, customer galleries, presentations, or case studies when the applicable User, customer, or Organization has authorized that use or when we otherwise have an appropriate legal right to use the material.

Sharing an authorized sample L-Card for reference or promotional purposes is not a sale of the User’s personal information.

Lead Capture and Lead Marketing Services

Lead Data provided through L-Card’s Lead Capture or Lead Marketing Services is obtained or generated from the sources described in Sections 4 through 7.

L-Card does not populate Lead Capture products by selling or repurposing private L-Card User account information or private contact lists.

Data and Technology Partners

We may work with third parties that provide data, technology, enrichment, matching, analytics, marketing, or other functionality necessary to provide applicable Services.

Business Partners

We may disclose information to business partners where necessary to provide a requested integration, product, promotion, or joint service.

Professional Advisers

Information may be disclosed to attorneys, accountants, auditors, insurers, consultants, and other professional advisers where reasonably necessary.

Government and Legal Recipients

We may disclose information where we reasonably believe disclosure is required or appropriate to:

comply with law;
respond to lawful legal process;
protect rights or safety;
investigate fraud;
enforce agreements; or
protect the security and integrity of the Services.

Corporate Transactions

Personal information may be disclosed or transferred in connection with:

financing;
due diligence;
merger;
acquisition;
reorganization;
sale of assets;
bankruptcy; or
another corporate transaction.

Any successor’s processing will remain subject to applicable law.

13. L-CARD DOES NOT SELL USER OR CUSTOMER PERSONAL INFORMATION

Orange Tree Apps / L-Card does not sell personal information belonging to L-Card Users or customers.

In particular, we do not sell:

L-Card account registration information;
User email addresses or telephone numbers;
private User contact lists;
contacts collected by Users through L-Card;
private digital card account information;
customer billing information;
private enterprise account information; or
other personal information collected from Users through their use of L-Card merely for the purpose of allowing unrelated third parties to market their own products or services.

We also do not place a User’s personal information into our Lead Capture products merely because that person uses L-Card.

Sharing Is Different From Selling

We may disclose personal information to service providers and other parties as reasonably necessary to provide, secure, administer, and support the Services, as described in this Privacy Policy. Such operational disclosures are not intended as sales of User personal information.

We may also share an actual L-Card digital business card, digital portfolio, digital resume, or similar customer example for reference, demonstration, presentation, customer-gallery, case-study, or promotional purposes when authorized by the applicable User, customer, or Organization or when we otherwise have an appropriate legal right to use that material.

We do not receive payment for sharing the personal information contained in those sample cards.

Lead Data Is Separate

L-Card’s Lead Capture and Lead Marketing Services may use Lead Data obtained or generated through third-party providers, licensed data, publicly available information, business information, intent signals, and other sources described in this Privacy Policy.

L-Card User and customer account information is not sold as Lead Data.

If our data practices materially change in the future in a manner that constitutes a sale of User or customer personal information under applicable law, we will update this Privacy Policy and provide legally required notices and choices before engaging in such practices where required.

14. SENSITIVE PERSONAL INFORMATION

Certain laws provide special protections for information classified as sensitive personal information or sensitive data.

Depending on the Services used, information that could fall within a legally defined sensitive category may occasionally be processed, for example precise geolocation when a User enables a location-dependent feature.

We process sensitive information only as reasonably necessary for authorized purposes and subject to applicable law.

We do not ask Users to place sensitive personal information on publicly accessible digital cards unless the information is necessary for the User’s intended purpose.

Where consent is legally required to process sensitive data, we will seek appropriate consent.

15. PAYMENT PROCESSING

Payments may be processed through third-party payment processors.

Payment processors may collect payment-card details and other financial information directly from you.

Their processing is governed by their own terms and privacy policies.

Orange Tree Apps may receive transaction information such as payment status, transaction identifiers, billing contact information, and portions of payment information necessary for recordkeeping, fraud prevention, and customer support.

16. THIRD-PARTY INTEGRATIONS

L-Card may permit Users to connect or interact with third-party services such as social networks, CRM systems, design platforms, payment services, communication tools, analytics platforms, and other applications.

When you choose to connect a third-party service, information may be exchanged between L-Card and that service according to:

your instructions;
the permissions you grant;
the integration’s functionality;
our agreements with the provider; and
the third party’s terms and privacy policy.

We encourage you to review third-party privacy practices before enabling integrations.

17. PUBLICLY SHARED INFORMATION AND SAMPLE L-CARDS

L-Card is designed in part to enable professional information sharing.

Information that you choose to publish through a publicly accessible digital card, digital resume, portfolio, QR code, NFC product, or public link may be viewed, copied, saved, or shared by others.

Once information has been shared with another person or made publicly accessible, Orange Tree Apps cannot control how every recipient subsequently uses that information.

You should publish only information you are comfortable sharing with the intended audience.

L-Card Customer Examples

L-Card may occasionally wish to show an actual User or customer card as a reference or example of what can be created using the platform.

Examples may be shown:

to prospective customers;
during product demonstrations;
in presentations;
in a customer card gallery;
in sales materials;
during training;
in case studies;
on L-Card websites or social media; or
in other L-Card promotional materials.

Identifiable actual customer or User cards will be used for these purposes only when the applicable User, customer, or Organization has authorized the use or when L-Card otherwise has an appropriate legal right to display the material.

This type of authorized reference use does not mean that L-Card sells the User’s data.

18. ENTERPRISE AND ORGANIZATIONAL ACCOUNTS

If your L-Card account is created or managed by an employer or other Organization, authorized administrators may have access to certain information and controls associated with the account.

Depending on the applicable agreement, administrators may be able to:

create accounts;
update business information;
establish branding;
manage licenses;
configure templates;
view administrative analytics;
deactivate accounts;
reassign licenses; and
manage organization-controlled content.

Your Organization’s own privacy policies may also apply to its processing of your information.

Questions concerning an Organization’s use of your information should be directed to that Organization.

19. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

provide Services;
maintain accounts;
complete transactions;
satisfy contractual obligations;
maintain security;
resolve disputes;
enforce agreements;
maintain appropriate business records;
comply with tax, accounting, legal, and regulatory requirements; and
exercise or defend legal rights.

Retention periods vary depending on the type of information, purpose of processing, contractual requirements, legal requirements, and operational needs.

When information is no longer reasonably necessary, we may delete, anonymize, aggregate, or otherwise dispose of it in accordance with applicable law and our retention practices.

Information may remain temporarily in backups after deletion from active systems.

20. DATA SECURITY

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, loss, or destruction.

Security measures may include, as appropriate:

access controls;
authentication;
encryption;
network and infrastructure protections;
logging and monitoring;
backup systems;
vendor management;
security policies; and
incident-response procedures.

However, no system, network, storage method, or electronic transmission is completely secure.

We therefore cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and securing devices used to access L-Card.

If you believe your account has been compromised, contact us promptly.

21. INTERNATIONAL DATA TRANSFERS

Orange Tree Apps is based in the United States.

If you access the Services from another country, your personal information may be processed in the United States or other countries where Orange Tree Apps or its service providers operate.

These countries may have data-protection laws different from those in your country.

Where applicable law requires safeguards for international transfers, we will use legally recognized transfer mechanisms or other appropriate safeguards.

Enterprise customers may enter into additional data-processing or international-transfer agreements with us where appropriate.

22. CHILDREN’S PRIVACY

The Services are primarily intended for business and professional use and are not directed to children under 13.

We do not knowingly collect personal information online directly from children under 13 without legally required parental consent.

If we learn that we have collected personal information directly from a child under 13 in circumstances requiring parental consent and such consent was not obtained, we will take appropriate steps to delete the information.

Parents or guardians who believe a child has provided personal information inappropriately may contact us using the information below.

Additional age restrictions or protections may apply under state, national, or international law.

23. YOUR PRIVACY RIGHTS

Depending on where you reside and applicable law, you may have rights concerning your personal information.

These may include the right to:

confirm whether we process your personal information;
access personal information;
obtain information concerning categories of personal information collected;
obtain a copy of certain personal information;
correct inaccuracies;
request deletion;
request restriction of certain processing;
object to certain processing;
withdraw consent;
request data portability;
opt out of certain legally defined sharing or targeted advertising where applicable;
opt out of certain profiling or automated decision-making activities;
limit certain uses or disclosures of sensitive personal information;
appeal a decision concerning a privacy request; and
receive equal service and pricing without unlawful discrimination for exercising privacy rights.

Because L-Card does not sell L-Card User or customer personal information, there is ordinarily no L-Card User-data sale from which a User needs to opt out.

However, privacy-law definitions vary by jurisdiction, and we will provide any legally required rights applicable to our actual practices.

Not every right applies in every jurisdiction or circumstance.

We may deny or limit a request where permitted by law, including where an exception applies or we cannot reasonably verify the request.

24. HOW TO EXERCISE YOUR PRIVACY RIGHTS

You may submit a privacy request by contacting:

Email: support@orangetreeapps.com

Mail:

Orange Tree Apps, LLC
Attn: Privacy Request
501 Miles Ridge Road
Madison, Indiana 47250
United States

Please include sufficient information for us to understand and process your request.

Depending on the request, we may need to verify your identity.

We will use information submitted for verification only as reasonably necessary to verify and process the request and for security or legal purposes.

We will respond within the timeframe required by applicable law.

25. AUTHORIZED AGENTS

Where permitted by applicable law, you may authorize another person to submit a privacy request on your behalf.

We may request evidence demonstrating that the agent has authority to act for you and may require verification directly from you where permitted.

26. APPEALS

If applicable privacy law gives you the right to appeal our decision regarding a privacy request, you may submit an appeal by emailing:

support@orangetreeapps.com

Please write “Privacy Request Appeal” in the subject line and provide sufficient information for us to identify the original request and understand the basis of your appeal.

We will respond within the period required by applicable law.

If an appeal is denied, we will provide additional information required by applicable law concerning available complaint procedures.

27. CALIFORNIA PRIVACY RIGHTS

This section supplements the remainder of this Privacy Policy for California residents to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies to Orange Tree Apps and the particular information involved.

Categories of Personal Information

Depending on your relationship with us and Services used, during the preceding twelve months we may have collected categories of personal information including:

identifiers;
personal information described in California customer-records laws;
commercial information;
internet or electronic-network activity;
geolocation information;
audio, electronic, visual, or similar information;
professional or employment-related information;
education-related information voluntarily included in resumes or profiles;
inferences drawn from information; and
sensitive personal information where applicable.

The specific information within these categories is described throughout this Privacy Policy.

Sources

We may obtain this information from:

consumers directly;
L-Card Users;
enterprise customers;
organizations;
devices and browsers;
service providers;
business partners;
data providers;
publicly available sources; and
other sources described in this Privacy Policy.

Business and Commercial Purposes

We may use information for purposes including:

providing Services;
maintaining accounts;
customer support;
security;
analytics;
improving products;
processing transactions;
marketing L-Card;
Lead Capture and Lead Marketing;
legal compliance; and
other purposes described in this Privacy Policy.

Categories of Recipients

We may disclose applicable categories of information to:

service providers and contractors;
enterprise customers;
other Users at your direction;
authorized recipients of sample L-Cards or customer examples;
data and technology partners;
business partners;
professional advisers;
government or legal recipients; and
parties involved in corporate transactions.

L-Card Does Not Sell User Personal Information

Orange Tree Apps / L-Card does not sell the personal information of L-Card Users or customers.

We do not sell private User contact lists, account information, digital card account information, or customer information as Lead Data.

Lead Data offered through separate Lead Capture and Lead Marketing Services is obtained or generated from the sources described elsewhere in this Privacy Policy and is not created by selling L-Card User account information.

L-Card may display or share an actual User or customer digital card as an authorized customer example, reference, demonstration, presentation, case study, or promotional sample. Such authorized use is not intended to constitute the sale of User personal information.

California Rights

Subject to applicable law and exceptions, California residents may have rights to:

know what personal information is collected;
access specific personal information;
delete personal information;
correct inaccurate information;
receive information concerning disclosures;
limit certain uses and disclosures of sensitive personal information; and
receive non-discriminatory treatment for exercising CCPA rights.

If Orange Tree Apps’ practices change in the future in a way that creates a legally defined sale or sharing requiring an opt-out under California law, we will provide the legally required notice and mechanism.

Requests may be submitted using the methods described in Section 24.

28. OTHER U.S. STATE PRIVACY RIGHTS

Residents of states with applicable comprehensive consumer privacy laws may have rights similar to those described above.

Depending on applicable law, these may include rights to:

access;
correction;
deletion;
portability;
opt out of targeted advertising where applicable;
opt out of certain legally defined disclosures where applicable;
opt out of certain profiling;
consent to or limit processing of sensitive data; and
appeal privacy-request decisions.

Orange Tree Apps does not sell L-Card User or customer personal information.

We will process eligible requests in accordance with the law applicable to the requesting individual.

29. EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND

Where applicable European, UK, or Swiss data-protection law applies, individuals may have rights including:

access;
rectification;
erasure;
restriction;
objection;
portability;
withdrawal of consent; and
the right to lodge a complaint with an appropriate supervisory authority.

Where Orange Tree Apps acts as a processor for an enterprise customer, individuals may need to submit requests to the applicable customer acting as controller.

You may contact us using the information in Section 35 regarding applicable privacy rights.

30. AUTOMATED PROCESSING AND INFERENCES

Certain Services may use algorithms, automation, data matching, enrichment, artificial intelligence, machine learning, or similar technologies to help provide features, analyze information, identify patterns, or generate inferences.

This may include processing associated with:

analytics;
fraud prevention;
data enrichment;
lead targeting;
search or intent signals;
campaign optimization; and
product functionality.

We do not intend Lead Data or automated outputs to be used to make decisions concerning eligibility for employment, housing, credit, insurance, government benefits, or another purpose regulated by the Fair Credit Reporting Act or similar laws unless specifically authorized and legally compliant.

Where applicable law provides rights concerning certain automated decision-making or profiling, we will provide those rights as required.

31. DO NOT TRACK

Some browsers provide “Do Not Track” signals.

Because industry treatment of traditional Do Not Track signals may vary, we do not necessarily respond to all traditional Do Not Track signals.

Where applicable law requires recognition of a particular opt-out preference signal, such as Global Privacy Control, we will process the signal as legally required.

32. DATA DE-IDENTIFICATION AND AGGREGATION

We may create aggregated, statistical, anonymized, or de-identified information from information processed through the Services.

We may use such information for legitimate business purposes, including:

analytics;
product development;
performance measurement;
research;
security;
business planning; and
improving the Services.

Where information is maintained as legally recognized de-identified data, we will not attempt to re-identify it except where permitted by law, such as to test whether de-identification methods are effective.

33. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

changes to our Services;
changes in technology;
changes in our data practices;
changes in legal requirements; or
other business or operational developments.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

If we make material changes, we may provide additional notice through the Services, email, account notification, website notice, or another appropriate method where required by law.

We encourage you to review this Privacy Policy periodically.

34. RELATIONSHIP TO THE TERMS OF USE AND OTHER AGREEMENTS

Use of the Services is also governed by the L-Card Terms of Use.

Enterprise customers, government customers, resellers, partners, and other customers may have separate written agreements with Orange Tree Apps.

If a separate data-processing agreement or other signed agreement contains privacy or data-protection provisions applicable to particular processing, those provisions will apply according to the terms of that agreement.

Enterprise Data Processing Addendum

When Orange Tree Apps Processes Personal Data on behalf of an enterprise, business, government agency, educational institution, or other organizational customer, the Orange Tree Apps / L-Card Enterprise Data Processing Addendum (“DPA”) may apply.

The DPA describes Orange Tree Apps’ obligations as a Processor, Service Provider, or Contractor, including requirements concerning processing instructions, confidentiality, information security, sub processors, Data Subject requests, security incidents, deletion and return of data, international transfers, and applicable U.S. state privacy laws.

The current DPA is available through the L-Card website and may be incorporated by reference into applicable enterprise agreements, order forms, statements of work, subscriptions, and other agreements.

If a customer has entered into a separately negotiated and signed DPA with Orange Tree Apps, the signed DPA will govern to the extent it conflicts with the standard online DPA.

35. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact:

Orange Tree Apps, LLC
d/b/a L-Card

Attn: Privacy
501 Miles Ridge Road
Madison, Indiana 47250
United States

Email: support@orangetreeapps.com
Telephone: (812) 920-6397

For privacy-rights requests, please use:

support@orangetreeapps.com

and include “Privacy Request” in the subject line where possible.

Effective Date: September 13, 2026
Last Updated: September 13, 2026