Privacy Policy

We collect what we need to run PinDrop and nothing more. We don't sell your data, we don't use it to train models, and you can delete it. This page spells out the details.

Account data. Your name, email, and a hash of your password when you sign up.

Project content. The URLs, pins, comments, screenshots, and files you put into PinDrop.

Usage data. Which pages load, which actions you take. We use this to fix bugs and figure out what to work on.

Billing data. Our payment processor handles cards. We only see an identifier and the last four digits, never the full number.

We use it to run the service, send the transactional emails you'd expect (account stuff, pin notifications, receipts), prevent abuse, and comply with the law. We don't sell your data. We don't use your project content to train AI models.

A short list of vendors process data on our behalf so we don't have to build everything from scratch: hosting, auth, email delivery, payments, analytics. They're contractually limited to using the data only to provide their service to us. No advertisers, ever.

You can delete a pin, a project, or your entire account from your settings. If you're in the EU, UK, or California you have additional rights under local law; email us and we'll honor them.

We hold onto your content while your account is active. When you delete something, it's gone from our live systems within thirty days. Encrypted backups roll off within ninety.

Data is encrypted in transit and at rest. Only a small number of engineers can touch production, and access is logged. No system is unbreakable. If we ever discover a breach that affects you, we'll tell you.

PinDrop isn't built for children under 13 and we don't knowingly collect data from them. If you think we have, email us and we'll delete it.

If we change how we handle your data in a meaningful way, we'll email you or show a notice in the app before it takes effect.