Privacy Policy

1. Overview

PinPoint ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data. By using PinPoint, you agree to the practices described here.

2. Data We Collect

Account data: When you sign up, we collect your email address and store it securely via Supabase Auth.

Project and feedback data: We store the projects you create, the feedback items submitted through your embedded widget (including page URL, browser/OS metadata, optional screenshots, and comments), and any status changes you make.

Billing data: Payments are processed by Paddle. We store only a Paddle customer ID and subscription status — we never see or store your full payment card details.

Usage data: We may collect basic anonymized analytics (e.g. page views) to improve the product. We do not sell this data.

3. How We Use Your Data

• To provide and maintain the Service
• To send transactional emails (account confirmation, password reset, feedback notifications)
• To manage your subscription and billing via Paddle
• To respond to support requests
• To improve the product based on aggregated usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following sub-processors to operate the Service:

• Supabase — database and authentication
• Paddle — payment processing and tax compliance (Merchant of Record)
• Resend — transactional email delivery
• Vercel — hosting and infrastructure

Each of these providers has their own privacy policy and data processing practices.

5. Cookies

We use cookies solely for session management (to keep you logged in). We do not use tracking or advertising cookies. The widget script embedded on your client's website does not set cookies on their visitors.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data is removed within a reasonable timeframe, except where we are required to retain it for legal or financial compliance (e.g. billing records, which Paddle retains per their obligations).

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, email us at pinpoint.help@outlook.com and we will respond within a reasonable timeframe.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed credentials, and row-level security in our database. However, no system is 100% secure and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice in the dashboard. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or data requests? Email us at pinpoint.help@outlook.com.