Privacy Policy

Effective Date: March 12, 2026 | Version 1.0

1. Introduction

Heartstamp Inc. ("Heartstamp," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

  • Account information: name, email address, profile photo (via Google OAuth or email sign-up)
  • Payment information: processed and stored by Stripe; we do not store credit card numbers
  • Content you create: greeting cards, images, messages, and recipient details
  • Communications: support requests, feedback, and correspondence with us

2.2 Information Collected Automatically

  • Device and browser information (type, OS, screen resolution)
  • IP address and approximate geolocation
  • Usage data (pages visited, features used, session duration)
  • Cookies and similar tracking technologies (see our Cookie Policy)

2.3 Information from Third Parties

  • Authentication data from Google (via Clerk) when you sign in with Google
  • Payment status from Stripe

3. How We Use Your Information

  • Provide, maintain, and improve our Services
  • Process transactions and send related information
  • Send administrative messages, updates, and security alerts
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve user experience
  • Detect, prevent, and address fraud and abuse
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

  • Service providers: Clerk (authentication), Stripe (payments), AWS (hosting/storage), PostHog (analytics), HubSpot (marketing), Google Analytics (analytics)
  • Print partners: when you order a physical card, we share delivery details with our print-on-demand partners
  • Legal requirements: when required by law, court order, or governmental authority
  • Business transfers: in connection with a merger, acquisition, or sale of assets

5. Your Rights

Depending on your location, you may have the following rights:

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate data
  • Deletion: request deletion of your personal data
  • Portability: request a machine-readable copy of your data
  • Opt-out of sale/sharing: we do not sell personal data, but you can opt out of marketing tracking via our Cookie Settings
  • Non-discrimination: we will not discriminate against you for exercising your rights

To exercise any of these rights, contact us at privacy@heartstamp.com.

6. US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, Texas, Oregon, or any other US state with a comprehensive privacy law, you have additional rights under your state's law. These include the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale or sharing of your personal information.

We honor the Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing request under applicable state laws.

7. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services. We retain certain data for up to 12 months after account deletion for legal, auditing, and fraud prevention purposes.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Heartstamp Inc.
Email: privacy@heartstamp.com