Privacy policy

Pinnit is a visual feedback tool for designs, PDFs, and websites, operated by Delfina Savoretti (the data controller), based in Argentina. This policy describes what data we handle and why. For any privacy matter you can write to info@pinnit.co.

• Account data: name, email, and avatar provided by Google when you sign in (Pinnit only uses Google OAuth, we don't store passwords).
• Content you upload: images, PDFs, and website captures, along with the notes, pins, and priorities you create on them.
• Website captures: when you paste a URL, Pinnit generates a capture of the public site; when you use the Chrome extension, the capture is generated in your browser from the page you are viewing (see the captures section).
• Technical usage data: server logs, device, browser, and usage metrics (see the analytics and cookies section).
• Billing data: payments are processed by Stripe; we don't store card numbers on our servers.

• Providing the service: creating projects, generating read-only review links, and exporting your feedback.
• Authenticating you and keeping your session secure.
• Processing payments and managing your plan.
• Sending operational notices (for example, the retention expiry of FREE projects).
• Improving the product with aggregated usage metrics (Google Analytics).

Capturing from the app works only on public sites, without login or paywall. The Chrome extension, instead, captures what you are seeing in your browser —including pages behind your own login— and only when you trigger it, with the button or the keyboard shortcut: the extension does not track your browsing and never captures anything on its own. In both cases the capture travels encrypted to your account, and you are responsible for having the right to review the content you upload.

Captures are deleted together with the project that contains them. If you own a site captured by a user and want to request its removal, write to info@pinnit.co and we will review it promptly.

We use first-party cookies to keep you signed in. We also use Google Analytics, a service by Google LLC, to understand product usage in aggregate: it uses Google's own cookies and may involve transferring pseudonymized usage data to Google servers in the United States. You can block these cookies from your browser or with the Google Analytics opt-out add-on; the service works the same either way.

• Anyone with the review link can view the shared project and its notes (it's read-only; on the Pro plan you can protect it with a password).
• Providers that help us operate, under their own security guarantees: Vercel (hosting and logs), Supabase (database and file storage), Google (sign-in and analytics), and Stripe (payments).
• Authorities, when the law requires it.

We do not sell your personal data.

FREE plan projects are automatically deleted after 30 days, along with their files. You can export your feedback before expiry or upgrade to a paid plan to keep them. When you delete your account we delete your associated data. Operational logs are kept for up to 30 days, and our providers' backups may retain deleted data for up to 30 additional days before being fully erased.

You can access, correct, export, or delete your personal data, and object to certain uses, under Argentina's Personal Data Protection Act (Law 25,326). To exercise them, write to info@pinnit.co and we will respond within the legal deadlines. The Agencia de Acceso a la Información Pública (AAIP) is the supervisory authority you can complain to. If you use Pinnit from the European Union or California, the equivalent rights under the GDPR or the CCPA also assist you where applicable.

We apply reasonable measures to protect your data: per-project access control, random review tokens, encryption in transit (HTTPS), and restricted access to the infrastructure. No system is 100% secure; if an incident affecting your personal data were to occur, we will notify you without undue delay.

We may update this policy; if a change is relevant we will let you know by email or in the product. For any privacy question, write to info@pinnit.co.