Privacy Policy

1. Introduction

Welcome to IntroPay.ai ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using IntroPay.ai, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Profile Information: Company name, role, preferences

2.2 Information from Integrations

• HubSpot Data: Contact information (names, emails, companies, job titles) with your explicit permission
• Google Contacts: Business contact information (only contacts with company details) with your explicit permission
• Gmail Data: Used only to send introduction emails when you approve them - we never access or read your existing emails

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Authentication tokens and session management

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Process introduction requests between companies and referrers
• Send introduction emails on behalf of referrers (with their approval)
• Process payments and payouts via Stripe
• Send service-related notifications and updates
• Improve our platform and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Within the Platform

• Referrers to Companies: When referrers join a company's network, their contact information is shared with that company
• Companies to Referrers: Introduction requests and company information are shared with referrers
• Contact Information: Contact names, companies, and job titles are visible to companies in the referrer's network (emails are hidden)

4.2 Third-Party Service Providers

• Supabase: Database and authentication hosting
• Stripe: Payment processing and payouts
• Resend: Email delivery service
• Vercel: Application hosting
• HubSpot: CRM integration (with your permission)
• Google: Gmail and Contacts integration (with your permission)

These providers are bound by contractual obligations to keep your information confidential and use it only for the services they provide.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• All data transmitted over HTTPS encryption
• Secure authentication via Supabase
• OAuth tokens encrypted and securely stored
• Regular security audits and updates
• Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Disconnect: Revoke access to HubSpot, Gmail, or Google Contacts at any time
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, contact us at: privacy@intropay.ai

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. When you delete your account:

• Your profile and account data are permanently deleted
• Synced contacts are removed from our servers
• CRM connections are terminated
• Financial records are retained for 7 years as required by law

8. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Users

Your information may be transferred to and processed in the United States and other countries. By using our service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

Legal basis for processing: Consent, Contract Performance, Legitimate Interests

11. California Privacy Rights (CCPA)

California residents have specific rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising rights

Note: We do not sell your personal information.

12. Cookies and Tracking

We use cookies for:

• Essential Cookies: Authentication and security
• Functional Cookies: Remember your preferences
• Analytics: Understand how you use our platform (anonymized)

You can control cookies through your browser settings, but this may limit functionality.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: