This Privacy Policy explains how Written by Inkly ("Inkly", "we", "us") handles personal information when you use our website and handwritten-mail service (the "Service"). Because our Service involves mailing physical cards, it is important to understand that we process two kinds of people's data: yours (the customer) and your recipients'.
1. Information we collect
Information you give us about yourself: your email address and account login, your order details, your company name and logo if you provide one, and support correspondence.
Information you give us about your recipients: the names, mailing addresses, optional company and email fields, and the personalized message you supply for each card. You provide this so we can produce and mail the cards.
Payment information: card payments are processed by Stripe. We do not store full card numbers; we receive limited transaction details (such as a payment confirmation) from Stripe.
Usage and device information: with your permission, we run first-party analytics on our public pages. We record page views and link clicks, referrer and UTM parameters, and randomly generated visitor and session identifiers stored in your browser. If a printed card carries a tracking QR code, scanning it records that a scan occurred so we can attribute the response.
2. How we use information
- To produce, address, and mail your cards.
- To process payments, credits, and invoices.
- To operate your account, dashboard, and API access.
- To send service emails (order confirmations and mailing updates) and respond to support requests.
- To measure and improve the site and the Service.
- To detect, prevent, and address fraud, abuse, or security issues, and to comply with law.
3. How we share information
We do not sell personal information. We share it only with service providers that help us run the Service, and only as needed:
- Stripe - payment processing.
- Supabase - database, authentication, and backend hosting.
- Vercel - website hosting and delivery.
- United States Postal Service - physical delivery of your cards.
- Cal.com - meeting scheduling, where you use a booking link.
- Zapier and similar automation tools - only if you connect them to your account.
- An email delivery provider - to send transactional emails.
We may also disclose information if required by law, to enforce our terms, or in connection with a merger or acquisition.
4. Your recipients' data
You are the controller of the recipient data you upload; we act as your processor for it, using it only to fulfill your orders. We rely on your representation that you have a lawful basis and any necessary permission to mail each recipient. Recipient data is retained with the related order (see retention below) and is not used for our own marketing.
5. Cookies and local storage
We use essential browser storage to keep you signed in, remember your cookie preference, and support features you request. Optional analytics storage is off until you choose “Allow.” Choosing “Essential only” or “Deny” keeps optional analytics off. Essential storage remains available so the site can work and remember your choice.
We remember your choice for up to six months. You can change it at any time using “Cookie settings” in the website footer. If you turn analytics off, we stop sending analytics events and remove the analytics identifiers from your browser. We do not use third-party advertising cookies. Clearing all browser storage may also sign you out. If your browser blocks storage, your preference lasts only for the current page.
6. Data retention
We keep account and order data, including recipient details, for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, and resolve disputes. You may ask us to delete data sooner, subject to those obligations.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To make a request, email hello@byinkly.com. If you are a business customer and need a Data Processing Agreement for the recipient data you upload, contact us and we will provide one.
8. Security
We use access controls, encryption in transit, and row-level database security to protect personal information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to those who need it.
9. International users
We operate in the United States, and your information will be processed there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S.
10. Children
The Service is for businesses and adults; it is not directed to children under 13, and we do not knowingly collect their information.
11. Changes
We may update this policy; material changes take effect when posted with a new effective date.
12. Contact
Questions or requests? Email hello@byinkly.com.