Privacy

Introduction
At Instiify, we prioritize protecting your data and ensuring compliance with relevant privacy regulations. We adhere to the Amazon.com Privacy Notice, particularly concerning the types of Personally Identifiable Information (PII) we collect and how we handle it. This policy outlines how we collect, process, store, use, share, and dispose of data securely, adhering to both industry standards and legal requirements.

We collect data through secure APIs and integrations, always with explicit consent and only for legitimate business purposes such as order processing and customer service. Our data collection practices comply with Amazon’s guidelines on PII handling.

Data is processed using encrypted channels and secure environments. We follow strict security protocols to ensure confidentiality, and access to data during processing is limited to authorized personnel.

Data is securely stored in Google Cloud, using AES-256 encryption for data at rest. Access controls and regular security audits are in place to ensure compliance with both internal policies and the Amazon.com Privacy Notice.

We use data solely for its intended purpose, including order processing, customer service, and improving our services. Any additional data usage requires explicit consent and follows Amazon’s privacy guidelines.

We do not share data with third parties unless required by law or necessary to fulfill business obligations. When data is shared, we ensure the third parties adhere to data protection standards outlined by Amazon and us.

Data is retained only for as long as necessary to meet business or legal requirements. Once it is no longer needed, we securely delete or destroy it in compliance with industry-standard practices.

We implement security measures such as:

• Encryption: AES-256 for data at rest, TLS for data in transit.
• Access Controls: Role-based access and multi-factor authentication (MFA) to restrict access.
• Monitoring & Auditing: Continuous monitoring and audits to identify vulnerabilities.
• Incident Response: A defined plan to handle data breaches promptly.

Employees receive regular training on data protection and secure handling of PII, ensuring compliance with Amazon’s data handling standards.

We adhere to relevant U.S. data protection laws and Amazon’s privacy standards. Our privacy policies are reviewed regularly to ensure ongoing compliance with both.

We review and update this policy regularly. Significant updates will be communicated to stakeholders.

Contact Information
For questions or concerns regarding our privacy practices, please contact:
Jonathan Haberkorn – admin@instiify.com
Josh Ciaramitaro – admin@instiify.com