1) Data we collect

From customers and site visitors

• Identification & contact: name, business name, email, phone, social handles.

• Account & transaction: plan, invoices, payment status (payments processed by Stripe; we don’t see full card numbers).

• Site/app usage: pages viewed, device/OS, IP, general location, referrer, cookies/SDK events.

• Support content: messages, files, and feedback.

From your marketing contacts (when you use our Services)

• Names, emails, phone numbers, consent status, campaign interactions (opens, clicks, replies, unsubscribes).

• Optional metadata you store (tags, notes).
  You must only upload contacts with a lawful basis (e.g., consent) and keep it up to date.

Children
Our Services are for businesses and not directed to children. We do not knowingly process data of individuals under 16.

2) Why we use data (legal bases)

• Provide the Services and customer support — contract.

• Billing, fraud prevention, and account security — legal obligation and legitimate interests.

• Improve and secure our Services (analytics, debugging) — legitimate interests.

• Marketing (emails/SMS to you) — consent where required; you can opt out anytime.

• Compliance with messaging/telecom rules, court orders, and tax/accounting — legal obligation.

3) SMS/Email notices (important)

For messaging you send through our platform:

• SMS: “Message frequency varies. Message & data rates may apply. Reply STOP to opt out, HELP for help.”

• Email: every email includes your identity and a working unsubscribe link.

4) Cookies & tracking

We use cookies and similar tech to run the site, keep you logged in, measure usage, and improve features.

• In the EU/UK, we’ll seek prior consent for non-essential cookies.

• You can change preferences anytime in your browser or via our Cookie Settings link (add this link on your site). Disabling some cookies may limit functionality.

5) Sharing your data

We share personal data with:

• Service providers/Processors: hosting, analytics, customer support, email/SMS platforms, and Stripe for payments.

• Business transfers: as part of a merger, acquisition, financing, or sale of assets.

• Legal: to comply with law or protect rights, safety, and security.
  We don’t sell personal information and we don’t allow vendors to use your data for their own ads.

6) International transfers

We may transfer data outside the EU/UK (e.g., to the U.S.) using Standard Contractual Clauses or equivalent safeguards, and by assessing provider practices. You can ask us for details.

7) Retention

• Account/billing records: kept as required by tax and accounting laws.

• Project files and logs: typically up to 24 months after termination unless we need them for legal reasons.

• Marketing contacts you upload: retained while your account is active or until you delete them.
  We delete or anonymize data when it’s no longer needed.

8) Security

We apply reasonable technical and organizational measures (access controls, encryption in transit, backups). No method is perfect; if we detect a personal-data breach that affects you, we’ll notify you without undue delay.

9) Your rights

EU/UK (GDPR/UK GDPR): you can access, rectify, erase, restrict, port your data, or object to certain processing; you can withdraw consent at any time. You may lodge a complaint with a supervisory authority (e.g., CNIL in France or the ICO in the UK).

U.S. state privacy (e.g., CA/CPRA, CO, CT, VA, UT): where these laws apply, you may have rights to know/access, delete, correct, opt out of certain processing (e.g., targeted advertising or “sale/share” if we ever did those), and non-discrimination for exercising rights.
We do not sell or share personal information as defined by CPRA.

Australia: if Australian law applies, we handle personal information per the Privacy Act and APPs. You may request access/correction and complain to the OAIC if unresolved.

How to exercise rights: email contact@inksite.com. We’ll verify your identity and respond within the time limits (generally 30 days under GDPR; 45 days under U.S. state laws).

10) Your role as Controller (when you use our platform)

When you upload contact lists or trigger campaigns, you decide what to send and to whom. You must:

• collect and maintain valid consent (no purchased or rented lists),

• honor opt-outs and suppression lists, and

• provide legally required notices to your contacts.

We process that data only on your instructions to provide the Services and maintain records of processing, sub-processors, and data-transfer safeguards.

11) Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. We’ll post the new effective date at the top. Continued use of the Services means you accept the updated Policy.

12) Contact

Questions or requests: contact@inksite.com