Effective April 27, 2026

PRIMZ (“we”, “us”) provides a creator platform and mobile app that lets you publish a branded landing page, curate smart-links, and share them with your audience. This policy describes exactly what information we collect when you use PRIMZ, why we collect it, who we share it with, and the rights you have over your data.

We keep this policy short and concrete. If something here isn’t clear, email us at [email protected].

For App Store privacy disclosures, the data PRIMZ collects maps to these categories:

• Contact Info — your email address.
• User Content — your bio, avatar, logo, background image, smart-link titles, destination URLs, and related metadata.
• Identifiers — your PRIMZ user ID and anonymous visitor ID.
• Usage Data — product interaction data from smart-link click and conversion events.

• To create and operate your account and creator page.
• To resolve smart-links, including the escape flow that bounces taps out of in-app browsers into your system browser so you stay signed into the destination site.
• To show you analytics on your own dashboard (clicks, conversions, platforms, campaigns).
• To secure the service against abuse, fraud, and automated attacks.
• To contact you about critical account and service notices (e.g. password resets).

We do not use your information to train advertising models, and we do not sell personal data.

Both cookies are HttpOnly, SameSite=Lax, and (in production) Secure. We do not set third-party advertising or tracking cookies.

• Google— if you sign in with Google, your browser communicates directly with Google to prove your identity. We receive the minimum profile data needed to create your account. Google’s handling of your data is governed by Google’s Privacy Policy.
• S3-compatible object storage — we use Amazon S3 or Cloudflare R2 to host the images you upload. Only the images you choose to upload are stored there.
• Hosting providers — our servers and database run on commercial cloud infrastructure. These providers act as processors under our instructions; they do not get independent access to your data.

We do not embed Facebook, TikTok, Meta, or other advertising pixels on creator pages or in the mobile app.

We keep your account and profile data for as long as your account is active. Click and conversion events are retained alongside your account so historical analytics remain visible on your dashboard. If you delete your account, we remove or anonymise your personal data within 30 days, except where we are required to retain limited records for legal compliance, fraud prevention, security investigations, or safety and CSAE reports.

You can delete your account directly from PRIMZ:

• On the web: Dashboard → Profile → Delete account, then type “DELETE” to confirm.
• On iOS or Android: Settings tab → Delete account, then confirm the deletion flow.

When deletion is confirmed, PRIMZ anonymises your email, username, bio, avatar, logo, background, theme, and display name; clears your password hash and Google ID; deactivates your smart-links; revokes all Redis sessions; and sets a deletion timestamp on your account. Full removal or anonymisation is completed within 30 days.

Limited records may be retained after deletion where required for legal compliance, fraud prevention, security investigations, or safety and CSAE reports.

Passwords are hashed with Argon2id. Sessions are stored in Redis with automatic expiry. Transport is encrypted with TLS. Image uploads go directly from your device to object storage using short-lived (5-minute) presigned URLs — our servers never see the raw bytes. No system is perfectly secure; if you suspect your account has been compromised, contact us at [email protected].

You can access and edit your profile at any time from the dashboard. You can also request any of the following by emailing us at [email protected]:

• A copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data.
• Restriction or objection to specific processing (where applicable under your local law, e.g. GDPR).

We respond to verified requests within 30 days.

PRIMZ is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). This 13+ minimum age also applies to the PRIMZ mobile apps for App Store age-rating consistency. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

Our infrastructure may process data in regions other than where you live. When we transfer personal data across borders, we rely on the standard safeguards provided by our cloud providers (e.g. EU Standard Contractual Clauses for transfers from the European Economic Area).

If we make material changes to this policy, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of PRIMZ after a change means you accept the updated policy.

Questions, requests, or complaints? Email [email protected].

← Back to home