Who we are
Introly is run by [legal entity name and address]. Questions about privacy go to support@getintroly.com.
What we store about you
When you sign up we store your name, your email address and how you signed in (Google, GitHub or an email link). We also store what you add: your photo, the roles you choose, your site address, your design choices and the sources you connect.
The items on your site come from your sources. Each one is saved with a link back to where it came from.
What we store from each source
We read public information only.
| Source | What we store |
|---|---|
| Résumé (PDF or Word) | The file, kept private, and the text we read from it. Your phone, home address and personal email are never shown on your site. They appear on your card or résumé PDF only if you switch each one on. |
| GitHub | Your public profile and public repositories: names, descriptions, languages, star counts and links. If you sign in with GitHub we also read your repositories. |
| Blogs, newsletters and YouTube | What is public: titles, short summaries, images, dates and links to the original. |
| X | Public posts and links. If you connect your account, we also keep the access token, encrypted. |
| We never scrape LinkedIn. We keep the post links you paste or share with us, what the page shows publicly (title, summary, image), and anything in a PDF export you upload. | |
| Other links | The title, description and image the page publishes about itself. |
Visitors to your site
People who visit a site, links page or card published on Introly are not tracked across the web. Our site analytics use no cookies and store no IP addresses, and we do not collect visitors' email addresses.
We count page views, the site a visit came from, clicks on items and buttons, and whether a visit started from a QR code, your links page, a short link or your card. Those counts are shown to you in Analytics.
Videos and other embeds load only when a visitor clicks them. Nothing from a third party loads before that.
If the owner of a site turns on its contact form, a visitor can write them a message. The form asks for a name, an email address and the message. We email it to the site owner, who sees that address and can reply. Introly keeps no copy: nothing is saved in our database or logs, and the visitor is not sent a copy. Each site can only pass on a limited number of messages a day, to stop spam.
Cookies and analytics in the app
Signing in uses cookies that keep you signed in. They are needed for the app to work.
Inside the app and on this website we use PostHog to see how the product is used, and Sentry to catch errors. [Details of cookies and local storage to be confirmed.]
AI
We send parts of your résumé and source content to Anthropic's Claude to write short text such as summaries and suggested changes. It is told to use only facts from your sources. [Retention terms with the provider to be confirmed.]
Who processes your data
We use these companies to run Introly:
- Supabase: database, sign-in and file storage
- Vercel: hosting, and domains where you use them
- Anthropic: AI that writes short text from your sources
- Stripe: payments
- Resend: email, including messages sent through a site's contact form while they are delivered
- Inngest: scheduled background work
- Sentry: error reports
- PostHog: product analytics inside the app
- Upstash: rate limiting
- Google Wallet: your card in Google Wallet, if you add it
- X and a search provider: reading public posts and finding public mentions
We email you about your account, your sign-in, your weekly changes and anything that needs you. Every email can be unsubscribed from in one click, and includes our postal address: [postal address].
Export and deletion
You can download everything we hold about you from your settings. The export is a zip with your profile, site, sources, items, links, versions and domains as JSON, plus your files. It is delivered as a link that works for 24 hours.
You can delete your account from your settings. There is a 7-day grace period, and you can change your mind during it. After that your data is removed from our systems. Domains you bought through Introly stay registered to you, and the deletion email includes the transfer code and its expiry date.
Your rights
You can ask us to correct, export or delete your data at any time, from your settings or by writing to support@getintroly.com. [Rights under GDPR, UK GDPR and CCPA to be written by counsel.]
Changes
If this policy changes in a way that matters, we will email you or tell you in the app before it applies.