The essentials
We store the minimum amount of profile, billing, and project data required to deliver the PinPic service. We never sell your personal information.
Privacy Policy
Your data, your control
PinPic collects only the information we need to power interactive images, measure performance, and keep your account secure. This policy explains what we collect, why, and how you can manage it.
Quick summary
Your choices
You can export, update, or delete your data at any time from the dashboard or by contacting us. Opt-outs for marketing emails are available in every message.
Third parties
We rely on trusted processors (payment, analytics, hosting) bound by strict contractual obligations and security controls.
Information we collect
We collect data in three main categories. If we ever need something new, we will update this document and notify affected customers.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, account role, plan/billing metadata, authentication and security records | Create and secure your account, send service notifications |
| Usage data | Interactive image and hotspot metadata, embed/share analytics, device/browser and IP-derived security signals | Operate the editor, provide reporting, prevent abuse |
| Billing data | Payment tokens, invoices, tax/VAT details | Process purchases through our PCI-compliant provider |
How we use information
- Provide the service: authenticate users, store interactive projects, and deliver embeds quickly.
- Improve PinPic: analyze aggregated usage to prioritize features and maintain reliability.
- Communicate: send onboarding tips, product updates, required legal notices, and billing receipts.
- Protect: detect fraud, enforce terms, and meet security or compliance obligations.
Sharing & transfers
We only share data with vendors that help us deliver PinPic. Each vendor signs a Data Processing Agreement and meets or exceeds our security standards.
- Hosting & infrastructure: customer content is stored on servers in Germany (EU).
- Payments: PCI-compliant processors handle card data; we store only tokens.
- Email, AI, and support operations: limited metadata is shared with service providers needed to deliver authentication, AI-assisted features, and customer support.
- Legal requirements: we may disclose information if required by law or to enforce agreements.
Your rights
You can exercise the following rights at any time:
- Request access or export of the data we hold about you.
- Update inaccurate or outdated information.
- Delete your account and associated data (except where retention is required by law).
- Object to marketing or restrict processing in certain contexts.
Need help?
Email privacy@pinpic.app. We respond to most requests within 30 days.
Data retention
We retain account data while your account is active. Account deletion from the dashboard disables access immediately and marks the account as deleted; permanent deletion and backup retention are handled through internal retention procedures and legal obligations.
Changes
We’ll post any updates on this page and, when changes are material, notify you via the dashboard or email before they take effect.