Privacy Policy

1. Information we collect

• Creator account data — email address, password (hashed, never stored in plain text), profile details you add (name, bio, handle, photo, links, follower count, accent color, gallery images, rate card, and any other card content you choose to fill in).
• Visitor analytics — when someone views a published card or taps a link, we log an anonymous page view or click event (timestamp, referrer, and browser user-agent). We do not store IP addresses or use this data to identify individual visitors.
• Leads & brand inquiries — if a visitor submits their email/contact info through a creator's subscribe form, or a brand submits an inquiry through a creator's media kit, that information is stored and made visible only to the creator whose card received it.

2. How we use it

To operate your card (rendering it publicly at your handle), show you analytics about your own card's performance, deliver leads and brand inquiries to your dashboard, and keep the service secure and working. We do not sell personal data, and we do not use visitor data for advertising.

3. Third-party processors

We rely on the following infrastructure providers to run InstaCard:

• Supabase — database, authentication, and file storage (profile photos, gallery images, media kit logos).
• Vercel — application hosting and delivery.

Each provider processes data solely to provide their respective service to InstaCard and is bound by their own privacy and security commitments.

4. Cookies & sessions

We use a small number of essential cookies set by Supabase Auth to keep creators signed in between visits. These are required for the dashboard to function and are not used for cross-site tracking or advertising.

5. Data retention & deletion

Your card data is retained for as long as your account exists. To request deletion of your account and all associated data (card, links, leads, brand inquiries, analytics), email us at privacy@instacard.app. Visitors who submitted a lead or brand inquiry to a creator can request removal of that specific record by contacting the creator directly, or us at the same address.

6. Changes to this policy

We may update this policy as InstaCard evolves. Material changes will be reflected by updating the "Last updated" date above.