Privacy Policy

Learn how we collect, use, and protect data across Instica products.

IN PLAIN ENGLISH

Optional website analytics stay off unless you allow them, and Instica honors Global Privacy Control. Instica does not sell personal information or share it for cross-context behavioral advertising. Your inventory data remains yours and can be exported.

California notice at collection

Effective July 9, 2026

Marketing website: California Notice at Collection

This notice describes information collected on Instica’s marketing and documentation websites. It applies at or before collection and supplements the complete product privacy policy.

Information we collect

California category	Examples and purpose	Retention	Sold or shared
Identifiers	IP address, name, email address, privacy and language preferences, and—after analytics permission—an Instica attribution ID and Google Analytics client ID. We use these to protect the site, remember choices, answer requests, measure permitted visits, and connect a permitted visit to signup.	Privacy preferences and attribution identifiers expire after no more than 12 months. Contact identifiers are kept through request resolution and then only for documented recordkeeping, legal, fraud-prevention, and security obligations. Security records are kept until the related delivery or abuse issue and applicable obligations are resolved.	Shared for cross-context behavioral advertising only if you allow analytics, because the Google Analytics property is linked to Google Ads. Never sold. Declining analytics or sending Global Privacy Control stops the sharing.
Commercial information	The contact lane, features, plans, or services you ask about or consider, plus permitted interactions with related pages and calls to action. We use this to route and answer inquiries and to understand permitted interest in Instica services.	Inquiry records are kept through resolution and then only for documented recordkeeping, legal, fraud-prevention, and security obligations. Permitted analytics are deleted or de-identified when they are no longer needed to compare site performance.	Shared for cross-context behavioral advertising only if you allow analytics, because the Google Analytics property is linked to Google Ads. Never sold. Declining analytics or sending Global Privacy Control stops the sharing.
Internet or other electronic network activity information	Pages viewed, referral information, calls to action, browser and device details, and request logs. Essential logs support delivery and security. Cookieless, self-hosted usage measurement runs by default and can be turned off at any time; Google Analytics begins only after permission.	Essential logs are kept until the related delivery or abuse issue and applicable obligations are resolved. Permitted analytics are deleted or de-identified when they are no longer needed to compare site performance.	Shared for cross-context behavioral advertising only if you allow analytics, because the Google Analytics property is linked to Google Ads. Never sold. Declining analytics or sending Global Privacy Control stops the sharing.
Geolocation data	Approximate city, region, or country derived from an IP address by site-delivery and security vendors, by the cookieless self-hosted measurement, and—after permission—by Google Analytics. We use it to protect the site and understand permitted use by general region; we do not request precise location.	Security-derived location follows the related security record. Permitted analytics location is deleted or de-identified when it is no longer needed to compare site performance by general region.	Shared for cross-context behavioral advertising only if you allow analytics, because the Google Analytics property is linked to Google Ads. Never sold. Declining analytics or sending Global Privacy Control stops the sharing.
Audio, electronic, visual, thermal, olfactory, or similar information	The message you submit and optional screenshots, documents, images, and text files attached to a support request. We use them only to understand, route, and resolve that request.	Based on the time needed to resolve the request and meet documented recordkeeping, legal, fraud-prevention, and security obligations.	No.
Professional or employment-related information	Company, team size, organization, topic, store or workspace, and deadline that you choose to submit through the contact form. We use this information to route and answer the request.	Based on the time needed to resolve the request and meet documented recordkeeping, legal, fraud-prevention, and security obligations.	No.

Please do not send sensitive information

The marketing site does not ask for passwords, payment-card numbers, government identifiers, health information, or other sensitive personal information. Do not include them in contact messages or attachments.

Sources

We collect this information directly from you, your browser or device, and vendors that help Instica deliver, secure, or measure the site.

Vendors and other recipients

The site loads the self-hosted Umami instance at analytics.instica.com by default. Umami is cookieless: it writes nothing to your device and sends nothing to a third party, so it runs without permission and you can turn it off at any time. Google Analytics loads only if you allow analytics. On this site, Google advertising storage, advertising user data, ad personalization, and advertising-personalization signals are disabled, and advertising click data is redacted. The Google Analytics property is nevertheless linked to Google Ads, so allowing analytics results in sharing for cross-context behavioral advertising at the account level; declining analytics prevents it. The contact page uses Cloudflare Turnstile for bot and abuse prevention whether or not optional analytics are allowed. Hosting, storage, security, and support infrastructure also process the limited information needed to provide those services.

Disclosures in the preceding 12 months

Instica has not sold personal information. In the preceding 12 months, information collected through Google Analytics has been shared for cross-context behavioral advertising, because the Google Analytics property is linked to Google Ads; this applies only to visitors who allow analytics. The categories above may also be disclosed to hosting, storage, security, support, and analytics vendors for the purposes described above.

Your California choices

Allow or decline analytics: use the first-visit notice or in the footer. Changing your choice is as easy as making it.
Do Not Sell or Share My Personal Information: Instica does not sell personal information. To stop sharing for cross-context behavioral advertising, decline analytics using Privacy Choices in the footer, or send Global Privacy Control. Either one applies immediately and no verification is required.
Global Privacy Control: when this browser sends GPC, Instica applies it to this browser or device, records the opt-out preference, and keeps optional marketing analytics off. That also stops any sharing for cross-context behavioral advertising. Instica does not sell personal information online or offline.
Do Not Track: older DNT signals are not standardized. Instica recognizes GPC as described above.
Know, delete, or correct: email administration@instica.com. We will verify and respond as required by applicable law.
Authorized agents: an authorized agent may make a California request for you. We may request proof of authorization and may verify your identity directly.
Non-discrimination: declining optional analytics does not change the website, product, price, or service available to you.

Instica does not sell personal information. Instica does share information for cross-context behavioral advertising, only with Google Analytics and only after you allow analytics; you can stop it at any time by declining analytics or by sending Global Privacy Control. Instica does not knowingly collect or share the personal information of people under 16. If these practices change, we will update this notice before the new collection or use begins and provide every required control.

Complete product policy

Last updated Nov 14, 2025

Instica Privacy Policy

Pinestraw Enterprises LLC
Last updated: November 14, 2025

This Privacy Policy describes how Pinestraw Enterprises LLC (“Pinestraw”, “we”, “us”, or “our”) collects, uses, and shares information when you use the Instica mobile application (the “App”) and related services (collectively, the “Service”).

By using Instica, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect information in the following categories:

1.1 Information You Provide

Account and profile information

Phone number used to create and log into your account
Display name or business name (if you choose to provide one)
Email address or other contact details you optionally provide for support or billing
Country or region, where inferred from your device or app settings

Inventory and content you add

Items you store in Instica (e.g., titles, descriptions, categories, purchase price, listing price, quantity, condition, notes, tags)
Photos you attach to items (e.g., pictures of inventory, covers, labels, barcodes)
Custom lists, collections, or other organization data you create

Communications

Messages you send to our support team (via in‑app support, email, or other channels)
Feedback, bug reports, or survey responses

1.2 Information Collected Automatically

When you use the App, we automatically collect:

Device information: device model, operating system version, app version, language, time zone
Log data: IP address, timestamps, screens viewed, buttons tapped, and other in‑app actions
Crash and performance data: through services like Firebase Crashlytics, to diagnose stability issues
Analytics data: through services such as Firebase Analytics, to understand feature usage and improve the Service

This information is generally collected in a de‑identified or pseudonymous form and is not used to personally identify you.

1.3 Information from Third Parties

Apple

When you make an in‑app purchase (e.g., an Instica subscription) through Apple’s App Store, Apple acts as the merchant of record. We receive limited information from Apple necessary to manage your purchase and subscription status (for example, subscription identifiers, transaction receipts, and renewal status). We do not receive your full payment details such as your credit card number.

Third‑party marketplaces and integrations (if enabled)

If you connect Instica to third‑party services (such as marketplaces, catalog providers, or other integrations that we support), we may receive inventory, listing, or pricing data from those services as authorized by you.
Data obtained from third‑party integrations is processed in accordance with this Privacy Policy and any additional terms presented to you when you enable those integrations.

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide and maintain the Service
- Create and manage your Instica account
- Sync and store your inventory data
- Process subscriptions and in‑app purchases
- Provide customer support and respond to your requests
Improve, personalize, and develop the Service
- Analyze usage patterns to understand which features are used and how
- Diagnose and fix bugs, crashes, and performance issues
- Develop new features and enhancements
Security and fraud prevention
- Protect accounts and data from unauthorized access
- Monitor for suspicious or abusive activity
- Enforce our Terms of Service
Communications
- Send transactional messages related to your account (e.g., purchase confirmations, important service announcements)
- Send optional product updates, tips, or promotional communications (where permitted by law and your preferences). You can opt out of promotional messages at any time.

We process your information on the basis of your consent, to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating, improving, and securing the Service.

We do not sell your personal information.

We may share information in the following limited circumstances:

3.1 Service Providers

We use trusted third‑party service providers to help us operate and improve Instica, for example:

Cloud hosting and storage
Analytics (e.g., Firebase Analytics)
Crash reporting and diagnostics (e.g., Firebase Crashlytics)
Logging, monitoring, and security tools
Customer support tools

These providers may process limited personal data on our behalf and only under contracts that require them to safeguard your information and use it solely for the services they provide to us.

3.2 Payment and Platform Providers

Apple (App Store / StoreKit): Handles the processing of in‑app purchases and subscriptions. We share necessary transaction information with Apple and receive information needed to validate and manage your subscription.

3.3 Third‑Party Integrations You Enable

If you choose to connect Instica to a third‑party service, we may share the data necessary to provide that integration (for example, selected inventory details to sync listings). You can disconnect integrations at any time via the App or the third‑party service.

3.4 Legal and Safety

We may disclose information if we believe in good faith that it is reasonably necessary to:

Comply with any applicable law, regulation, legal process, or governmental request
Protect the rights, property, or safety of Pinestraw, our users, or the public
Enforce our terms, policies, or agreements
Detect, prevent, or address fraud, security, or technical issues

3.5 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

4. Data Retention

We retain your information for as long as:

Your account is active, or
It is needed to provide the Service and fulfill the purposes described in this Policy, or
We are legally required to retain it (for example, for tax, accounting, or other regulatory reasons).

You may request deletion of your account and associated data (see Your Rights and Choices below). When we delete data, we will do so using commercially reasonable methods. Some information may remain in backups or logs for a limited period, or may be retained in de‑identified form.

5. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Request that we correct inaccurate or incomplete data
Deletion: Request that we delete your personal data, subject to certain exceptions
Restriction / Objection: Request that we restrict or stop certain processing
Portability: Request a copy of your data in a machine‑readable format
Withdraw consent: Where we rely on consent, you may withdraw it at any time

You can exercise many of these rights directly in the App (for example, by updating your profile or deleting content). For other requests, contact us using the details in Contact Us below. We may need to verify your identity before fulfilling your request.

You may opt out of non‑essential email communications by using the unsubscribe link in our emails or by contacting us. You cannot opt out of important transactional or service‑related communications.

6. Children’s Privacy

Instica is not directed to children under the age of 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us.

7. International Transfers

Pinestraw Enterprises LLC is based in the United States, and we (and our service providers) may process your information in the United States and other countries that may not provide the same level of data protection as your home jurisdiction.

Where required by law, we use appropriate safeguards (such as contractual data protection clauses) to protect personal data transferred across borders.

8. Security

We use appropriate technical and organizational measures to protect your information, including encryption in transit, access controls, and regular security updates. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the security of your device and any authentication methods (such as one‑time codes sent to your phone).

9. Third‑Party Services and Links

The Service may contain links to third‑party websites, apps, or services that are not owned or controlled by Pinestraw. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third‑party services you use.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and, where appropriate, provide additional notice (for example, in‑app messaging or email).

Your continued use of Instica after any changes to this Policy constitutes your acceptance of the updated Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

Pinestraw Enterprises LLC
Email: administration@pinestraw.enterprises
Mailing Address: 3423 Piedmont Rd, Suite 248. Atlanta, GA, 30328