This policy explains what personal data MyCircle.iD collects, why we collect it, who we share it with and the choices you have. We collect as little as we need to run the service, and we do not sell your data.
1. Who is responsible
MyCircle.iD is built and run by Pylogix, 1717 Saint James Place #628, Houston, TX 77056, United States, with a second office at 346 Kensington High Street, London W14 8NS, United Kingdom.
Pylogix is the controller for your account data and for data about visitors to the MyCircle.iD website. When your own page collects information from its visitors, for example through an email signup block, you are the controller of that information and we process it on your behalf.
2. What we collect
Account details
Your name, email address and password when you sign up. We store passwords as a secure hash, never as plain text. We also keep your language, time zone and plan settings.
What you create
Your pages, links, QR codes, files, vCards, events, projects and settings.
Security and sign-in data
When you sign up, we record your IP address and approximate location (country and city). Each time you sign in, we record the IP address, device type, operating system and approximate location, plus your last activity time and browser details. We use this to protect your account and to investigate abuse.
Statistics for your pages and links
When someone opens one of your pages, short links or QR codes, we record the country, city, device type, operating system, browser, browser language, referring website, UTM tags and whether the visit is unique. We do not store visitors' IP addresses with these statistics. Location comes from a lookup database that runs on our own server, and the IP address is discarded after the lookup.
What your pages collect
If you add email or phone signup blocks, we store what your visitors submit so that you can see and export it.
Messages
If you contact us, we keep your message and our reply.
3. How we use it
- to create and run your account, pages and links
- to show you statistics about your pages and links
- to send service emails, such as account confirmation, password resets and important notices about the service
- to keep MyCircle.iD secure, stop spam and abuse, and enforce our Terms of Service
- to understand how people use our own website, so we can improve it
- to meet our legal obligations
We do not sell your personal data, and we do not use the content of your pages for advertising.
4. Legal bases (UK and EU)
If you are in the United Kingdom or the European Union, we rely on these legal bases: contract, to provide the service you signed up for. Legitimate interests, to keep the service secure, prevent abuse and improve our website. Consent, where the law requires it for cookies or similar technology. Legal obligation, where we must keep or share data by law.
5. Cookies
Cookies we need
These keep the service working and cannot be switched off: a session cookie that keeps you signed in, "remember me" cookies if you choose to stay signed in, a cookie that records whether a visit to a link is unique, cookies that remember when a visitor has entered a link password or accepted a sensitive content warning, and a referral cookie if you arrive through a referral link.
Analytics on our website
We use Microsoft Clarity on the MyCircle.iD website to see how people use it, for example which pages they open, where they click and how far they scroll. Clarity uses cookies and Microsoft processes this data under its own privacy terms. We do not add Clarity to the bio pages you publish.
Pixels you add
If you add tracking pixels from services such as Facebook, Google, TikTok, LinkedIn or Pinterest to your pages or links, those services may set their own cookies on your visitors' devices. You are responsible for telling your visitors and getting consent where it is required.
You can block or delete cookies in your browser settings. If you block the cookies we need, you will not be able to sign in.
6. Who we share data with
We only share personal data with companies that help us run MyCircle.iD, and only as much as they need:
- Hosting. Our servers and email run on infrastructure we manage with our hosting provider.
- Cloudflare sits in front of our website to keep it fast and protect it from attacks, so it handles the traffic to and from the site.
- Microsoft provides Clarity analytics for our website.
- Google Fonts serves the fonts on our website, so Google receives your IP address when the fonts load.
- Gravatar (Automattic) shows your profile picture when you are signed in. It receives a scrambled version of your email address, not the address itself.
- Services embedded in pages, such as Spotify or YouTube, receive data from visitors who open a page that embeds them.
We may also share data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.
7. International transfers
Pylogix works from the United States and the United Kingdom, and our providers may process data in other countries. When UK or EU law requires it, we use recognized safeguards for these transfers, such as standard contractual clauses.
8. How long we keep data
- Account details and content are kept while your account is open. When you delete your account, we delete them from our live systems. Copies in backups are overwritten on a regular cycle.
- Statistics for your pages and links are kept for the period included in your plan, currently 365 days.
- Security and sign-in records are kept as long as they are needed to protect accounts and investigate abuse.
- Messages are kept as long as we need them to deal with your request.
9. Your rights
You can see and correct most of your data yourself in your account settings, and you can delete your account at any time. You can also ask us to:
- give you a copy of your personal data
- correct or delete it
- limit or stop how we use it
- send it to you in a format you can move to another service
- withdraw consent you have given
If you live in California or another US state with a privacy law, you have the right to know what we collect, to correct it, to delete it and to opt out of its sale or sharing. We do not sell personal data or share it for cross-context behavioral advertising, and we will never treat you differently for using your rights.
To make a request, contact us through our contact page. We may need to confirm your identity first. In the UK you can also complain to the Information Commissioner's Office, and in the EU to your local data protection authority.
10. If you visited a page made with MyCircle.iD
Pages on MyCircle.iD are created by our users, and each owner decides what their page shows and collects. If a page asked for your email or phone number, please contact the owner of that page about it. We record the statistics described above, and we will help with your request where we hold your data.
11. Children
MyCircle.iD is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal data, contact us and we will delete it.
12. How we protect data
We use encrypted connections, store passwords as secure hashes, limit who can access our systems and offer two-factor authentication for your account. No online service can promise perfect security, so please use a strong, unique password.
13. Changes to this policy
We will update this policy when our service or the law changes. If a change is significant, we will tell you by email or in the app before it takes effect.
14. Contact us
Questions about privacy or your data? Send us a message through our contact page and a person will reply.