Privacy Policy

121Notes is a product of Pure Sight & Sound, Inc., a Pennsylvania corporation (“Company”, “we”, “us”, or “our”). Pure Sight & Sound, Inc. is the data controller for personal information processed through the Service.

We collect the following categories of personal information:

• Visitor information: Name, email, phone number, zip code, company, and any other registration fields collected when a visitor registers for an event. This information is provided directly by the visitor at registration.
• Vendor information: Name, email, organization, role, and account credentials for vendors and their staff.
• Organizer information: Name, email, organization, and account credentials for event organizers.
• Notes and content: Conversation notes, lead tags, and other content created by users within the Service.
• Payment metadata: Transaction IDs, amounts, timestamps, and last 4 digits of card. We do not see, store, or have access to your full payment card details. All card data is collected and processed directly by Stripe.
• Device and usage data: IP address, browser type, operating system, pages viewed, scan timestamps, and analytics events. Used for security, debugging, and product improvement.
• Cookies and similar technologies: Session cookies for authentication, plus essential cookies required to operate the Service.

We use personal information to:

• Provide, operate, maintain, and improve the Service;
• Match leads, dedupe scans, and process unlocks for vendors;
• Process payments and prevent fraud (via Stripe);
• Send transactional emails (registration confirmations, receipts, password resets);
• Respond to support requests;
• Generate aggregated analytics to improve the product;
• Comply with legal obligations and enforce our Terms.

When a visitor registers for an event, they consent to having their badge scanned by participating vendors at that event. Vendors may capture and view a masked version of visitor information (first name, last initial, company) at no cost. To view full contact details, vendors must pay an unlock fee ($1 USD per lead). Vendors are contractually prohibited from using captured contact information for any purpose other than legitimate post-event follow-up, and from sharing it outside their organization.

We do not sell personal information. We share personal information only with the following categories of recipients, and only as necessary to operate the Service:

• Stripe, Inc. — payment processing. See Stripe’s Privacy Policy.
• Supabase — database and authentication hosting (United States region).
• Vercel, Inc. — application hosting and analytics.
• Resend — transactional email delivery.
• Vendors at the event you registered for— visitors’ contact information is shared with vendors who scan their badge, subject to the unlock model described above.
• Event organizers — limited registration information is shared with the organizer of the event you attend.
• Law enforcement and regulators — when required by law, court order, or to protect the rights and safety of users or the public.
• Acquirer — in the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquirer, subject to this Privacy Policy.

We retain personal information for as long as your account is active or as needed to provide the Service. We retain transaction records (payment metadata, audit logs) for at least seven years to comply with tax, accounting, and audit requirements. You may request deletion of your account and personal data at any time (see “Your rights” below); some information may be retained where required by law.

We use industry-standard security measures to protect personal information, including HTTPS encryption in transit, encryption at rest, role-based access control via Postgres row-level security, and audit logging of sensitive operations. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Receive a copy of your information in a portable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a data protection authority.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at support@121notes.com. We will respond within 30 days.

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, contact us and we will delete it.

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can disable cookies in your browser, but doing so will prevent you from signing in to the Service.

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates the most recent revision. Material changes will be communicated by email or by posting a prominent notice in the Service.

Questions about this Privacy Policy or our data practices?