PinCloud logo

Privacy Policy

Last updated: 9/13/2025

1. Introduction

At PinCloud ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform that connects travelers with local experiences through curated pin collections.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and profile details when you create an account
Content: Pin packs, reviews, ratings, and other content you create
Communications: Messages you send to us or other users
Payment Information: Payment details processed securely through PayPal

2.2 Information We Collect Automatically

Usage Data: How you interact with our platform, pages visited, and features used
Device Information: IP address, browser type, operating system, and device identifiers
Location Data: General location information (city/country level) for content personalization

3. How We Use Your Information

Provide Our Service: To deliver pin packs, process payments, and maintain your account
Personalize Experience: To show relevant content and recommendations based on your location and preferences
Communicate: To send important updates, respond to inquiries, and provide customer support
Improve Our Service: To analyze usage patterns and enhance our platform
Ensure Security: To detect and prevent fraud, abuse, and security threats
Comply with Law: To meet legal obligations and respond to lawful requests

4. Information Sharing

We Do Not Sell Your Data: We do not sell, rent, or trade your personal information to third parties.
Service Providers: We may share data with trusted service providers who help us operate our platform:
• Payment processors (PayPal) for secure payment processing
• Cloud hosting providers (Supabase) for data storage
• Analytics services to understand platform usage
• Customer support tools to assist you
Legal Requirements: We may disclose information if required by law or to protect our rights and safety.
Business Transfers: In case of merger or acquisition, your data may be transferred to the new entity.

5. Data Security

Encryption: We use industry-standard encryption to protect your data in transit and at rest
Access Controls: We implement strict access controls and authentication measures
Regular Audits: We conduct regular security assessments and updates
Employee Training: Our team is trained on data protection and security best practices

6. Data Retention

Account Data: We retain your account information as long as your account is active
Content: Your created content is retained unless you delete it or your account is deleted
Usage Data: We retain usage data for up to 2 years for analytics and service improvement
Payment Data: Payment information is retained as required by law and for financial records
Deletion: You can request deletion of your data, and we will process it within 30 days

7. Your Rights

Access: You can request a copy of the personal data we hold about you
Correction: You can update or correct your personal information in your account settings
Deletion: You can request deletion of your account and associated data
Portability: You can request a copy of your data in a machine-readable format
Objection: You can object to certain processing of your personal data
Withdrawal: You can withdraw consent for data processing where applicable

8. Cookies and Tracking

Essential Cookies: We use necessary cookies to provide core functionality
Analytics Cookies: We use analytics cookies to understand how our platform is used
Third-Party Cookies: Some third-party services (like Google Maps) may set their own cookies
Cookie Control: You can control cookies through your browser settings

9. International Data Transfers

Global Service: Our service is available worldwide, and data may be processed in different countries
Data Protection: We ensure adequate protection for international data transfers
EU Transfers: For EU users, we ensure transfers meet GDPR requirements

10. Children's Privacy

Age Requirement: Our service is not intended for children under 18 years old
No Collection: We do not knowingly collect personal information from children under 18
Parental Rights: If you believe we have collected data from a child, please contact us immediately

11. Changes to This Privacy Policy

Updates: We may update this Privacy Policy from time to time
Notification: We will notify you of significant changes via email or in-app notification
Continued Use: Continued use after changes constitutes acceptance of the updated policy

12. Contact Us

Questions: If you have questions about this Privacy Policy or our data practices, please contact us:
Email: info@pincloud.com
Data Protection Officer: dpo@pincloud.com
Address: Berlin, Germany
EU Representative: For EU users, you can also contact our EU representative at [EU Representative Details]