Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account: Name, email address, password
• Use our service: Data, documents, and content you upload or create
• Contact us: Email correspondence, support requests, feedback
• Subscribe to a plan: Billing information (processed securely through Paddle)

1.2 Automatically Collected Information

When you access our service, we automatically collect:

• Usage data: Pages visited, features used, time spent, interaction patterns
• Device information: Browser type, operating system, device identifiers
• Log data: IP address, access times, error logs
• Cookies and tracking: Session data, preferences, analytics (see Section 7)

1.3 Third-Party Data

If you connect third-party services (e.g., Google Drive, APIs), we may receive information from those services in accordance with their privacy policies and your authorization.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our service: Account management, feature delivery, data processing
• Improve our service: Analytics, bug fixes, feature development, user experience optimization
• Communication: Service updates, security alerts, marketing (with your consent)
• Payment processing: Billing, subscription management through Paddle
• Security and fraud prevention: Protect against unauthorized access, abuse, and illegal activities
• Legal compliance: Comply with applicable laws, regulations, and legal processes
• AI features: Process your data through AI models to provide intelligent features (see Section 4)

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely using:

• Firebase: User authentication, database, and file storage
• Google Cloud Platform: Infrastructure and services
• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access controls: Role-based access, multi-factor authentication options

3.2 Security Measures

We implement industry-standard security measures including:

• Regular security audits and vulnerability assessments
• Secure authentication and session management
• Monitoring and logging of security events
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. AI and Data Processing

Pindown AI uses artificial intelligence to provide intelligent features:

• AI providers: We use Google Vertex AI, Anthropic Claude, and other AI models
• Data processing: Your content may be processed through these AI services to generate insights, summaries, and visualizations
• No training on your data: We do not use your data to train AI models
• Third-party AI terms: AI processing is subject to the privacy policies of our AI providers
• Opt-out: You can choose not to use AI features, though this may limit functionality

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our service:

• Paddle: Payment processing and subscription management
• Google Cloud Platform / Firebase: Hosting, database, authentication
• AI providers: Google Vertex AI, Anthropic (for AI features)
• Analytics: Usage analytics and monitoring (anonymized)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to:

• Comply with legal processes
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to emergency situations

5.3 Business Transfers

If Pindown AI is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information when you explicitly authorize us to do so, such as when you share pages, pinboards, or collaborate with other users.

6. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal obligations)
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of data processing
• Withdrawal of consent: Withdraw consent for marketing or optional features

To exercise these rights, contact us at contact@pindown.ai or through your account settings. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

7.1 Types of Cookies

• Essential cookies: Required for authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use our service (anonymized)
• Marketing cookies: Used for advertising (with your consent)

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our service.

8. Data Retention

We retain your personal information only as long as necessary to:

• Provide our service and maintain your account
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required by law to retain it longer.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection through:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions regarding data protection in recipient countries
• Other lawful transfer mechanisms as required

10. Children's Privacy

Pindown AI is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at contact@pindown.ai so we can delete it.

11. Third-Party Links and Services

Our service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending you an email notification (for significant changes)
• Displaying a prominent notice in our service

Your continued use of Pindown AI after changes become effective constitutes acceptance of the updated Privacy Policy.

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Right to lodge a complaint: You have the right to file a complaint with your local supervisory authority
• Automated decision-making: We do not use automated decision-making or profiling that significantly affects you

14. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to know: What personal information we collect, use, disclose, and sell
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information
• Right to non-discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at contact@pindown.ai with "California Privacy Rights" in the subject line.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: