Legal

Privacy Policy

Effective 7/9/2026

This Privacy Policy explains how Written by Inkly ("Inkly", "we", "us") handles personal information when you use our website and handwritten-mail service (the "Service"). Because our Service involves mailing physical cards, it is important to understand that we process two kinds of people's data: yours (the customer) and your recipients'.

1. Information we collect

Information you give us about yourself: your email address and account login, your order details, your company name and logo if you provide one, and support correspondence.

Information you give us about your recipients: the names, mailing addresses, optional company and email fields, and the personalized message you supply for each card. You provide this so we can produce and mail the cards.

Payment information: card payments are processed by Stripe. We do not store full card numbers; we receive limited transaction details (such as a payment confirmation) from Stripe.

Usage and device information: we run first-party analytics on our public pages. We record page views, referrer and UTM parameters, and an anonymous session identifier stored in your browser. If a printed card carries a tracking QR code, scanning it records that a scan occurred so we can attribute the response.

2. How we use information

To produce, address, and mail your cards.
To process payments, credits, and invoices.
To operate your account, dashboard, and API access.
To send service emails (order confirmations and mailing updates) and respond to support requests.
To measure and improve the site and the Service.
To detect, prevent, and address fraud, abuse, or security issues, and to comply with law.

3. How we share information

We do not sell personal information. We share it only with service providers that help us run the Service, and only as needed:

Stripe - payment processing.
Supabase - database, authentication, and backend hosting.
Vercel - website hosting and delivery.
United States Postal Service - physical delivery of your cards.
Cal.com - meeting scheduling, where you use a booking link.
Zapier and similar automation tools - only if you connect them to your account.
An email delivery provider - to send transactional emails.

We may also disclose information if required by law, to enforce our terms, or in connection with a merger or acquisition.

4. Your recipients' data

You are the controller of the recipient data you upload; we act as your processor for it, using it only to fulfill your orders. We rely on your representation that you have a lawful basis and any necessary permission to mail each recipient. Recipient data is retained with the related order (see retention below) and is not used for our own marketing.

5. Cookies and local storage

We use essential browser storage to keep you signed in and to hold an anonymous analytics session identifier. We do not use third-party advertising cookies. You can clear this storage in your browser, though doing so may sign you out.

6. Data retention

We keep account and order data, including recipient details, for as long as your account is active and as needed to provide the Service, meet legal and accounting obligations, and resolve disputes. You may ask us to delete data sooner, subject to those obligations.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To make a request, email hello@byinkly.com. If you are a business customer and need a Data Processing Agreement for the recipient data you upload, contact us and we will provide one.

8. Security

We use access controls, encryption in transit, and row-level database security to protect personal information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to those who need it.

9. International users

We operate in the United States, and your information will be processed there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S.

10. Children

The Service is for businesses and adults; it is not directed to children under 13, and we do not knowingly collect their information.

11. Changes

We may update this policy; material changes take effect when posted with a new effective date.

12. Contact

Questions or requests? Email hello@byinkly.com.