Privacy policy

PIP Links is operated by PIP Iowa City. This page explains what we collect and why.

When someone scans a code

We record the time, the code, the device type (for example iPhone or Android), an approximate city and region from the network, and whether the visit looks like a person or an automated scanner. We don't record precise location, and we don't set tracking cookies on the people who scan. This information is shown only to the account that created the code and to that account's clients.

Mailing lists

Our customers upload mailing lists to create codes. They choose which columns to keep. We use that information only to provide the service to that customer, and we never sell it or use it for our own marketing.

Customers and their clients

We keep the names and email addresses of account editors and client portal users so they can sign in. Client portal sign-in uses passkeys; we store a public key, never a password or fingerprint.

Requests and reports

If you request access or report a link, we keep what you send us so we can respond.

Landing pages and forms

Some of our customers publish a simple landing page with a form. What you type into one of those forms goes to that customer (and to their CRM if they've connected one); we store it on their behalf and never use it ourselves. Pages can't ask for passwords, card or bank details or government ID numbers.

Security logs

To protect accounts and stop abuse we record the network address (IP) and browser type for sign-ins, access requests, abuse reports, form submissions and sign-up attempts. Those records are deleted or anonymised after 90 days. Payment-processor notifications are kept for 30 days.

Domains

If a customer registers a domain through PIP Links, the name, address, email and phone number of the domain's owner are passed to our registrar, Name.com, as required by ICANN, and are kept while the domain is registered through us.

Sharing

We use Cloudflare to run and secure the service and to send email. We share data with our customers' own CRMs only when a customer connects one. Card payments for PIP Links plans are processed by Authorize.net; we receive only the card type and last four digits. We don't sell personal information.

Retention and your choices

Data is kept while an account is active and deleted when the account owner asks us to remove it; nightly backups are kept for 30 days. To ask about or remove information about you, contact the business that sent you the mail piece, or contact us through the request form.