Privacy policy
Last updated: November 2, 2026
This privacy policy describes how the Vata application, published by Ochanta (“we”), collects, uses and protects users' data.
Data controller
OCHANTA, SARL with share capital of €2,000.00
21 rue Alfred Cortot, 34500 Béziers, France
SIREN: 892 564 121
Contact: contact form
Data we collect
Vata is a professional digital business card application. To work, it collects the following data:
| Type of data | Examples | Purpose |
|---|---|---|
| Personal information | Last name, first name, job title, phone number, email address | Displaying and updating the user's digital business card |
| Photos | Profile picture, company logo | Customizing the business card and the application interface |
| Application identifiers | Access key (login token) linked to a QR code | Authenticating the device and linking it to an account / a company |
| Request or question (website form) | First name, last name, company, email address, phone (optional), number of cards, message (optional) | Processing your request (card, question, account deletion) and replying to you |
| Application preferences | Chosen theme, card language, offline mode | Personalizing the user experience; the language is saved with the card, the rest stays on the device |
Camera access
The application asks for access to the device's camera only to scan the QR codes that link the device to a user profile. No image or video is recorded or transmitted: only the text content of the QR code is read, instantly, to make this link.
Sharing of data
The data described above is sent only to Ochanta's servers (domains vata.eco and vata.ochanta.fr), over an encrypted connection (HTTPS), in order to provide the digital business card service.
The only exception: the information entered in the card request form on the website, described below.
We do not sell your data and do not share it with any third party for commercial or advertising purposes. The application contains no advertising or third-party tracking module.
Request and contact form
The form on the vata.eco home page, used to request a card, ask a question or request the deletion of your account or data, collects your first name, last name, company, email address, phone number (optional), the number of cards wanted and a message (optional). This information is used only to process your request and reply to you, with your consent (checkbox on the form).
It is sent by email to our team and recorded in our request-tracking tool, which relies on the Supabase service (processor). It is neither sold nor used for advertising. It is kept for as long as needed to process your request.
You can request access to, correction or deletion of this information via the website's contact form.
Sharing your details with a card holder
After saving someone's contact from their Vata card, you can send them your details: first name, last name, company (optional), phone number and/or email address, message (optional), or the link to your own Vata card. Sending is voluntary and requires ticking the consent box on the form.
This information is sent only to the card holder, who receives it in their Vata app, by email (with a contact file attached) and, if they turned them on, as a notification on their device. It is kept on Ochanta's servers until the holder deletes it or their card is deleted, and is neither sold nor used for advertising.
To ask for the deletion of the details you shared, contact the card holder, or use the website's contact form.
Following changes to a card
The holder of a Vata card can choose to follow another card, to be notified when its holder changes their details and to update their address book. We then keep the link between the two cards and a copy of the followed card's details as they were at the last update, in order to show what has changed. This copy only contains information that is already public on the card.
The holder of a card can at any time forbid the following of their card or remove a follower, without the follower being notified.
Notifications
If you turn on notifications in the application, we store, for your card, the technical address that your browser's notification service gives us (and the associated encryption keys) so that we can send you notifications. You can turn them off at any time from the application, which deletes this record.
Protection against abuse
To limit automated submissions and abuse, we count requests per IP address. The IP address is immediately turned into an irreversible fingerprint, and these counters are deleted automatically after a few hours. The forms also use an invisible field and a one-time token, which contain no personal data.
Local storage on the device
Some information (profile, preferences, language, access key) is also stored locally on the device (the browser's / application's local storage) to allow offline use and avoid signing in again each time the application opens.
If the Vata application is installed and set up on your device, it places a vata_app cookie (lifetime: one year) that contains only the public code of your card (the one in your vata.eco link). When you scan someone else's card, vata.eco reads it to offer to send your card in one tap or to follow theirs from your application. This cookie is used neither for advertising nor for tracking, and is not passed to any third party. It disappears if you delete your browser's cookies.
Retention period
Data is kept as long as the account or the associated card is active. It can be deleted at the user's request (see the Account deletion page).
Your rights
In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, restrict and delete your personal data. To exercise these rights, contact us via the website's contact form.
Changes to this policy
This privacy policy may be updated from time to time. Any change will be published on this page with its update date.
Contact
For any question about this privacy policy, contact us via the website's contact form.