This Privacy Policy explains how Instankeys ("we", "us") collects and uses your personal data. We comply with the General Data Protection Regulation (GDPR) and similar privacy laws.
1. Data we collect
- Account data: name, email, language preference, country.
- Order data: products purchased, payment method (not card numbers), billing email.
- Technical data: IP address, device fingerprint, browser type, pages visited.
- Communication: support tickets, reviews, newsletter preferences.
2. Why we collect it
- To deliver the digital products you purchase.
- To prevent fraud and chargebacks (legitimate interest).
- To send transactional emails (order confirmations, delivery, refund notices).
- To send marketing emails — only with your consent, opt-out anytime.
- To comply with tax and accounting laws.
3. Legal basis (GDPR Art. 6)
We process data on the basis of: contract performance (orders), legal obligation (tax records), legitimate interest (fraud prevention), and consent (marketing, non-essential cookies).
4. Sharing your data
We share data only with: payment processors (Stripe/PayPal), email delivery providers, fraud detection services, and law enforcement when legally required. We never sell your data.
5. Your rights
- Right to access — request a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure ("right to be forgotten").
- Right to portability — receive your data in machine-readable format.
- Right to object to processing.
- Right to lodge a complaint with your local data protection authority.
To exercise any right, email contact@instankeys.com. We respond within 30 days.
6. Data retention
Account data is kept while your account is active. Order data is kept for 7 years for tax compliance. Technical logs are kept for 90 days.
7. Security
We use 256-bit SSL encryption, encrypted storage for sensitive fields (delivery keys), and access controls. No system is 100% secure, but we follow industry best practices.
8. International transfers
Your data may be processed in jurisdictions outside the EEA. When this happens, we use Standard Contractual Clauses to ensure equivalent protection.
9. Children
Instankeys does not knowingly collect data from anyone under 16. If you believe a minor has provided us data, please contact us for removal.
10. Contact
Data Protection Officer: contact@instankeys.com