Privacy Policy

Last updated: 2025-01-15

At ICanopy ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our link-in-bio platform and related services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

  • Account Information: When you create an account, we collect your name, email address, username, and password. If you sign up using Google OAuth, we receive your name, email, and profile picture from Google.
  • Profile Content: Information you add to your ICanopy page, including links, descriptions, images, videos, social media handles, and any other content you choose to display.
  • Payment Information: If you subscribe to a paid plan, our payment processor (Stripe) collects your payment card details. We do not store your full card number on our servers.
  • Communications: When you contact us for support or other inquiries, we collect the content of your messages.

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

  • Usage Data: Information about how you interact with our Service, including pages visited, features used, and actions taken.
  • Analytics Data: For your ICanopy pages, we collect visitor analytics including page views, link clicks, referral sources, geographic location (country/city level), device types, and browsers. This data helps you understand your audience.
  • Device Information: Information about your device, including IP address, browser type, operating system, and device identifiers.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and analyze usage patterns.

1.3 Information from Third Parties

We may receive information from third parties, including:

  • Social Login Providers: If you authenticate using Google, we receive basic profile information as permitted by your privacy settings.
  • Analytics Partners: We use Google Analytics and similar services that may provide aggregated usage information.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Create and manage your account, display your ICanopy page to visitors, and process your transactions.
  • Improve Our Service: Analyze usage patterns, troubleshoot issues, and develop new features.
  • Personalize Your Experience: Customize content and recommendations based on your preferences and usage.
  • Communicate With You: Send service-related notices, respond to inquiries, and provide customer support.
  • Marketing: With your consent, send promotional communications about new features, offers, or content. You can opt out at any time.
  • Security and Fraud Prevention: Protect against unauthorized access, abuse, and fraudulent activity.
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Public Information

Your ICanopy page and the content you add to it (links, descriptions, images, etc.) are publicly accessible by default. Your username and public profile information are visible to anyone who visits your page.

3.2 Service Providers

We share information with third-party service providers who help us operate our Service, including:

  • Hosting: Vercel (website hosting and serverless functions)
  • Database: Turso (data storage)
  • Image Storage: Cloudinary (image hosting and optimization)
  • Payment Processing: Stripe (payment handling)
  • Analytics: Google Analytics, Yandex Metrika (usage analytics)
  • Error Tracking: Sentry (error monitoring)
  • Email: Email service providers for transactional and marketing emails

3.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

3.5 With Your Consent

We may share your information in other ways if you have given us explicit consent to do so.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or fraud prevention purposes.

Visitor analytics data is retained for up to 24 months to provide you with historical insights about your page performance.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access and Portability

You can access and download your data from your account settings. You may request a copy of all personal data we hold about you.

5.2 Correction

You can update your account information and profile content at any time through the dashboard.

5.3 Deletion

You can delete your account at any time from your settings. This will permanently remove your profile, content, and associated data.

5.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in your account settings.

5.5 Cookies

Most browsers allow you to control cookies through their settings. Note that disabling cookies may affect the functionality of our Service.

5.6 Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no industry standard for how to respond to such signals.

6. Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL
  • Secure password hashing
  • Regular security assessments and updates
  • Access controls and authentication for our systems
  • Session management and automatic logout

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Service, you consent to such transfers.

8. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under the applicable age, we will delete it promptly.

9. Third-Party Links

Your ICanopy page may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

12. Additional Information for Specific Regions

12.1 European Economic Area (EEA) and UK

If you are in the EEA or UK, you have additional rights under the GDPR, including:

  • The right to object to processing of your personal data
  • The right to restrict processing
  • The right to data portability
  • The right to lodge a complaint with a supervisory authority

Our legal bases for processing include: contract performance (providing the Service), legitimate interests (improving our Service, fraud prevention), consent (marketing), and legal obligations.

12.2 California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt out of the sale of your personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided above.