Signing in
- You sign in with Google, with Microsoft, or with a one-time code we email you. ContactCross has no password of its own, so there isn’t one to guess, reuse or leak.
- Sign-ins expire on their own, and we keep track of every device that’s signed in to your account.
- You can see those devices in your settings and sign any of them out.
Connected accounts
- Google and Microsoft connect through their own sign-in pages, so we never see your password.
- iCloud connects with an app-specific password that you can revoke from your Apple Account at any time. We never ask for your main Apple password.
- The access you give us to these accounts is stored with industry-standard encryption.
Card scanning
- Card photos are processed in the EU.
- Each photo is saved with the contact it created, so you can check it later or delete it.
Storing your data
- ContactCross runs on scalable cloud infrastructure, and everything you store with us is encrypted.
- Backups are encrypted too. They stay on ContactCross and you restore them from your settings, so there’s no copy sitting in a downloads folder.
Exporting and deleting
- Export your contacts as CSV or vCard whenever you like.
- If you delete your account, you have 30 days to change your mind. After that, everything in it is removed.
- A full copy of your account comes as a password-protected file. Only you get the password, and we delete the file after 35 days.
- Deleted contacts stay in the bin for 30 days before they’re gone for good.
Reporting a problem
If you think you’ve found a security issue, email support@contactcross.com with “Security” in the subject. Please give us a chance to fix it before sharing details publicly.