Last updated 5 October 2026
Beacon is a trading name of Senso Ventures Limited, a company registered in England and Wales (number 14518265), with its registered office at 20 Wenlock Road, London, N1 7GU, United Kingdom. We are the data controller for the personal data described in section 1.
If you have a question about anything here, write to [email protected].
Beacon holds two kinds, and the difference matters because our obligations differ.
When you sign up we hold your email address, your name if you give it, the contents of your digital card, and your workspace settings. We are the controller of this data. We decide what to collect and why.
When somebody fills in your capture form, or you add them by hand, that record belongs to you. We are a processor of it, acting on your instructions. You are the controller.
That is not a technicality. It means you are responsible for having a lawful basis for holding those people’s details, for telling them how you will use them, and for answering them if they ask to be removed. Beacon gives you the tools to do it. It cannot do it for you.
| What | Why | Lawful basis |
|---|---|---|
| Email and password | To give you an account and let you sign in | Performance of our contract with you |
| Your card details, such as name, role and photo | To publish the page you share | Performance of our contract with you |
| Billing details | To take payment for a paid plan | Performance of our contract with you |
| Technical logs, such as errors and request records | To keep the service working and secure | Our legitimate interest in a service that runs |
We do not sell personal data. We do not use it to train machine learning models. We do not use third party advertising or analytics trackers on the signed-in app.
Payments are handled by Stripe. Card numbers are entered on Stripe’s own pages and never reach our servers or our code. We hold only a customer reference, the status of your subscription, and when the current period ends.
We use the following services to run Beacon. Each one processes data only to provide its part of the service.
| Service | What it does | Where |
|---|---|---|
| Convex | Database and backend hosting | European Union |
| Stripe | Payments and subscription billing | United States and Ireland |
| Resend | Transactional email, such as invitations | United States |
| Cloudflare | Domain, network and image storage | Global network |
If you connect a CRM such as HubSpot, Pipedrive or Salesforce, we send the contacts you choose to that service on your instruction. What happens to them there is governed by your agreement with that provider, not by this policy.
Where a provider is outside the UK, transfers rely on the UK International Data Transfer Addendum or an adequacy decision.
Under UK GDPR you can ask us to:
Email [email protected] and we will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk.
If your request is about a contact somebody captured using Beacon, write to that person rather than to us. They control that record. If you do not know who they are, we will help you find out.
Passwords are stored as one-way hashes, so nobody at Senso Ventures Limited can read yours. Data is encrypted in transit. Access to production systems is limited to people who need it. Every query in the application is scoped to a single workspace, so one customer cannot read another’s data.
No service is immune to a breach. If one happens and it is likely to put your rights at risk, we will tell you and the Information Commissioner’s Office within 72 hours of becoming aware of it.
Beacon sets cookies that are strictly necessary to keep you signed in. Those do not need your permission and cannot be turned off without breaking the product.
On our marketing pages we also use Google Analytics, through Google Tag Manager, to see which pages bring people here. Those cookies are not strictly necessary, so we ask first and nothing is loaded until you say yes. If you decline, no Google script is fetched at all, rather than being fetched and told to behave.
We do not run analytics inside the app or on anybody’s public card. The app holds your contact database and a card belongs to the person who made it, not to us. Cards are counted using totals we store ourselves, with no cookies, no addresses and no device fingerprints, so the figures say how many and never who.
We set no advertising cookies anywhere, and we do not share what we measure with advertisers.
If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top shows the last change.