This privacy policy explains what personal data postinote.com ("PostiNote"), a QR digital business card service, collects, how it is used, and your rights.
1. Data We Collect
- Account information: Full name, email address, phone number and your password (passwords are stored as irreversible hashes).
- Business card content: Job title, company, address, website, social media handles, profile and cover photos that you voluntarily add to your card. By the very purpose of a digital business card, this content is shown to people who view your card.
- Sign in with Google: If you register with Google, we receive your name, email address and profile picture from Google.
- Sign in with Instagram: If you sign in with Instagram (Meta), we receive only your Instagram username, account ID, name and profile picture. Your Instagram password is never shared with us. This data is used solely to create your PostiNote account and to recognize you on subsequent logins.
- Usage statistics: Aggregate statistics such as how many times your card was viewed, from which country/city and device type.
2. How We Use Data
- To provide the digital business card service and generate your card and QR code,
- To let you sign in securely,
- To send email notifications for features you request (e.g. time capsules),
- To produce aggregate, non-identifying statistics to improve the service.
We do not sell your personal data and do not share it with third parties for advertising.
3. Third-Party Services
- Meta Platforms (Instagram API): Used for Sign in with Instagram and optional card sharing features. Meta's data practices are governed by the Meta Privacy Policy.
- Google (OAuth): Used for Sign in with Google.
4. Storage and Security
Your data is stored in access-restricted databases on hosting infrastructure, and all connections are encrypted with SSL/TLS.
5. Data Deletion
- You can delete your card from your dashboard at any time.
- When you remove PostiNote from Settings → Website permissions in the Instagram app, your Instagram identity data is automatically deleted from our systems. Our data deletion request endpoint complies with Meta's standard.
- To delete your entire account, contact us by email; requests are completed within 30 days at the latest.
6. Cookies
We use strictly necessary cookies to keep your session active and remember your language preference. No third-party advertising/tracking cookies are used.
7. Contact
For any privacy-related question: noreply@postinote.com