Privacy Policy

Who we are, and who this covers

Introly provides digital business cards to companies. This policy covers three different groups of people, and what we hold about each of them is different.

A company and its admins sign up and run a workspace. An employee is given a card by their employer. A recipient is someone who opens a card — they never sign up, and they may never have heard of us, which is why they are described here in as much detail as the other two.

What we collect — company and admin data

The company name, an optional domain, the brand kit (logo, colours, fonts), billing records, and the name and email address of each admin.

We use it to run the workspace, render cards, bill the company through Stripe, and send transactional email about the account. We do not sell it, and we do not use it to advertise to you.

What we collect — employee data

Name, job title, work email, phone number, department, website, social links and a photo, where the employer provides them. These are the contents of the card itself.

We use them to render the card, to generate the QR code and the downloadable contact file, and to send the employee transactional email about their own card. An employee's card content is set by their employer, not by us.

What we collect — recipients

If you open someone's card, we count the visit: which card, what kind of interaction, roughly when, and the referring site where your browser sends one. We set no cookies, store no visitor identifier, and load no third-party script. There is nothing in that record that identifies you, and nothing that links one visit to another.

If you choose to leave your details on a card, we store exactly what you typed — your name, an email address or phone number, an optional message — along with the fact that you consented and when. That is the only way we hold anything that identifies you, and it only happens if you fill the form in.

How visit counting works, and how to turn it off

Counting is on by default and is explained on every card: there is a Privacy link in the footer of each one. Opening it lets you turn counting off for every Introly card on that device.

If your browser sends Global Privacy Control or Do Not Track, we do not count your visit at all and you do not have to touch anything. Turning counting off never hides or disables anything else — the card and all of its actions work exactly the same.

The only thing we store on your device is your own choice, and only once you make it. Remembering that you asked not to be counted is how we honour the request.

Cookies

Public card pages use no cookies at all. Declining tracking stores a single value in your browser's local storage recording that choice.

Signed-in areas use strictly necessary cookies to keep you signed in, and a cookie remembering whether your sidebar is collapsed. We use no advertising or cross-site tracking cookies anywhere.

Your rights — access, export and deletion

These are built, not promised. A workspace admin can download a complete archive of everything their company holds, and an employee can download everything we hold about them, from their own dashboard.

Deletion actually deletes. A recipient's record is removed outright; an employee's name, contact details and photo are overwritten, their sign-in is disabled, and their card link stops resolving permanently. Nothing is merely hidden.

If you shared your details on someone's card and want them deleted, contact the company whose card it was — they can action it directly. You can also write to us at privacy@introly.co and we will route it. We will confirm it is you before deleting anything, using the contact details already on the record rather than any supplied in the request.

We respond within 30 days, inside the one calendar month GDPR Article 12(3) allows and the 45 days CCPA allows.

Where data is held, and who else sees it

Data is held in Supabase (Postgres and file storage). Payments are processed by Stripe, which handles card details — we never see or store a card number. Transactional email is sent through Resend.

Each company's data is separated in the database by row-level security, so one company cannot read another's. An employee's visitor detail is private from their own employer: admins see totals per card and per team, and there is no admin-facing export of individual visits in any format.

Invoices and payment records are retained by Stripe under their own statutory retention period, which is the one thing a deletion request cannot remove.

Changes to this policy

Each version of this document is dated and stays published at its own address, so a version you accepted remains readable. We record which version you accepted when you signed up.

Contact

Questions, or a request about your data: privacy@introly.co.