Who we are
Pinpoint is a visual feedback tool for agencies and studios. In this policy, "we" means the Pinpoint team. Contact us at hello@pinpoint.example.
What we collect
- Account details: your name, email address and password. We store passwords only as one-way hashes, never in readable form.
- Workspace details: your agency name, logo and brand colour, and your teammates' names and email addresses.
- Content: the website links and files you add for review, and the comments left on them.
- Client reviewers: the name a reviewer types and, only if they choose, their email address to hear about replies.
- Technical data: one cookie that keeps you signed in, and basic server logs (such as IP address and time of request) used for security and troubleshooting.
How we use it
- To run the service: show reviews, send notifications, sign you in and reset passwords.
- To keep it secure: prevent abuse, investigate problems and keep backups.
- To talk to you about your account. We don't send marketing emails without your permission.
We don't sell personal data, and we don't use it for advertising.
Who we share it with
Only the providers we need to run Pinpoint: our hosting provider, which stores the data, and our email provider, which delivers notification emails. Our website loads fonts from Google Fonts, which may receive your IP address. We may disclose data if the law requires it.
How long we keep it
We keep your data while your account is active. When you delete a review, its comments and files are removed. Backups are kept for 14 days and then deleted. If you ask us to delete your workspace, we delete it and it disappears from backups within 14 days.
Your choices and rights
You can view and update your details in Settings, turn off notification emails, and delete reviews at any time. Client reviewers can unsubscribe from any email in one click. Depending on where you live, you may have the right to access, correct, export or delete your data. Email us and we'll help.
Security
Client websites load from a separate, locked-down domain. All traffic uses HTTPS. Read more on our security page.
Changes
If we change this policy in a meaningful way, we'll tell you by email or in the app before the change takes effect.