ITSMI Privacy Policy
Last updated: September 27, 2026 • Effective immediately
1. Our Privacy Commitment
At ITSMI, we believe that your personal and professional identity belongs entirely to you. We build products designed to share who you are with the world, without compromising your private personal data or tracking visitors across the internet.
2. Information We Collect
We collect only information necessary to operate your digital identity profile and smart cards:
- Account Credentials: Email address and encrypted authentication credentials provided during registration via Supabase Auth.
- Profile Details: Public display name, username, biography, company name, job title, and social links you voluntarily configure.
- Granular Visibility Controls: Your telephone number, direct email, and website are private by default and are only displayed publicly if you explicitly opt-in.
- NFC Smart Card Metadata: Hardware card serial numbers and public routing IDs (
/c/[publicId]). Personal data is never stored on the physical NFC chip itself.
3. Privacy-First Analytics (No Third-Party Cookies)
Unlike traditional social media or tracking widgets, our visitor analytics engine is strictly privacy-centric:
- Zero Cross-Site Tracking: We never use third-party advertising cookies, fingerprinting libraries, or retargeting pixels.
- No IP Storage: Visitor IP addresses are processed ephemerally at our cloud edge for geocoding and abuse protection, but are never persisted to our database.
- Aggregated Metrics Only: Tap counts, QR scans, and link clicks are grouped by coarse country and device category (Mobile vs. Desktop).
4. Data Retention Policy
In accordance with our strict data minimization principles, raw analytics event records are automatically pruned and deleted after 90 days. Historical metrics beyond 90 days are preserved only as anonymized aggregate monthly totals.
5. Secure Payment Processing (Stripe)
All subscription and one-time payments for ITSMI Pro memberships and physical NFC smart cards are processed securely by Stripe Inc. (PCI-DSS Service Provider Level 1). ITSMI servers never receive, process, or store your credit card numbers or security codes.
6. Your Rights & Data Portability
You retain complete ownership of your personal profile data. You have the right to:
- Access and export your digital contact card at any time in standard vCard (.vcf) format.
- Update or change your public username and contact details instantly in the dashboard.
- Request permanent account deletion and erasure of all associated database records.
7. Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer at:
privacy@itsmi.com • ITSMI