Privacy policy

Introduction

Pinwarden ("we," "our," or "us") operates pinwarden.com and provides Google Business Profile management services. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

By using Pinwarden, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

Information we collect

Account information

When you create an account or purchase a plan, we collect:

• Name and email address
• Business name and industry category
• Geographic location (for rank tracking)
• Phone number (if provided during onboarding)

Google Business Profile data

When you grant Pinwarden access to your Google Business Profile through OAuth authentication, we collect and process:

• Profile information (business name, address, hours, categories, attributes, services)
• Reviews and ratings (text, author names, dates, responses)
• Posts and photos you've published
• Questions and answers (Q&A section)
• Performance metrics (views, clicks, direction requests, phone calls)
• Profile completeness and verification status

We access this data solely to deliver the service you purchased. We write to your profile to publish posts, respond to reviews, add photos, update profile fields, and perform optimization tasks.

Payment information

All payment processing is handled by Stripe, Inc. We do not store your full credit card number, CVV, or bank account details. Stripe stores this information in compliance with PCI-DSS standards. We receive only the last four digits of your card number, expiration date, and card brand for display in your account dashboard.

Stripe's privacy policy governs their collection and use of payment information: https://stripe.com/privacy

Usage and analytics data

We collect data about how you interact with pinwarden.com and the Pinwarden dashboard:

• Pages visited, time spent on pages, referral sources
• Device type, browser type, operating system
• IP address (anonymized after 24 hours)
• Features used within the Pinwarden dashboard
• Error messages and system logs (for debugging)

We use Google Analytics (via Google Tag Manager) to collect aggregate usage data. Google's privacy policy applies to their data collection: https://policies.google.com/privacy

Communications

If you contact us via email or phone, we collect the contents of your message and any attachments you send. We retain support conversations for 2 years to provide better service and resolve future issues.

How we use your information

We use the information we collect to:

• Deliver the service. Manage your Google Business Profile by publishing posts, responding to reviews, optimizing profile fields, tracking rankings, and generating monthly reports.
• Process payments. Bill your account monthly or charge one-time purchases through Stripe.
• Communicate with you. Send transactional emails (receipts, monthly reports, service updates, password resets) and respond to support requests.
• Improve the product. Analyze aggregate, anonymized usage patterns to identify bugs, measure feature adoption, and prioritize development.
• Prevent fraud and abuse. Detect suspicious account activity, prevent spam, and enforce our Terms of Service.
• Comply with legal obligations. Respond to subpoenas, court orders, or other legal processes as required by law.

What we don't do

We will never:

• Sell your data. We do not sell, rent, or trade your personal information or business data to third parties for marketing purposes.
• Train AI models on your data. Your business-specific data (reviews, posts, profile content) is not used to train machine learning models or improve AI systems outside of your account.
• Share data between customers. Your Google Business Profile data is never shared with or visible to other Pinwarden customers.
• Send unsolicited marketing. We only send marketing emails to users who explicitly opt in. You can unsubscribe at any time.
• Access more than necessary. We only request the Google API scopes required to deliver the service. We do not access Gmail, Google Drive, or other unrelated Google services.

Data sharing and disclosure

We may share your information with third parties only in the following circumstances:

Service providers

• Stripe: payment processing
• Google Cloud Platform: hosting and infrastructure
• Cloudflare: CDN and DDoS protection
• Google Analytics: website analytics

These providers are contractually required to protect your data and use it only for the purposes we specify.

Legal requirements

We may disclose your information if required by law, subpoena, court order, or government investigation. We will notify you of such requests unless prohibited by law.

Business transfers

If Pinwarden is acquired by or merged with another company, your information may be transferred to the new owner. We will notify you via email before your information becomes subject to a different privacy policy.

With your consent

We may share your information with third parties when you explicitly consent (e.g., if you request integration with another service).

Google API Services User Data Policy

Pinwarden's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the Google Business Profile API scopes necessary to provide our service.
• We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition (with prior notice).
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless we have your affirmative consent, it's necessary for security purposes, or required to comply with applicable law.

Data security

We implement industry-standard security measures to protect your information:

• All data transmitted between your browser and Pinwarden is encrypted using TLS (HTTPS).
• Google OAuth tokens are encrypted at rest and rotated regularly.
• Access to customer data is restricted to authorized personnel only, using role-based access controls.
• We conduct regular security audits and penetration testing.
• All servers and databases are hosted in secure, SOC 2 compliant data centers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Cookies and tracking technologies

We use the following types of cookies:

Essential cookies

Required for site functionality (authentication, session management, security). These cannot be disabled.

Analytics cookies

Google Analytics cookies track page views, traffic sources, and user behavior on pinwarden.com. You can opt out using the Google Analytics Opt-out Browser Add-on.

No advertising cookies

We do not use cookies for advertising, retargeting, or behavioral tracking across websites.

Data retention

We retain your information for as long as necessary to provide the service and comply with legal obligations:

• Active subscriptions: All account and profile management data is retained while your subscription is active.
• After cancellation: Account data is retained for 90 days to allow reactivation. After 90 days, we permanently delete your account, profile data, and OAuth tokens.
• Reports and exports: Monthly reports sent to your email are yours to keep. We do not delete emails you've already received.
• Payment records: Invoices and transaction records are retained for 7 years to comply with tax regulations.
• Support conversations: Retained for 2 years for customer service and dispute resolution.

You can request earlier deletion by emailing support@pinwarden.com. We will process deletion requests within 7 business days, except where retention is required by law.

Your rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update inaccurate or incomplete information from your account dashboard or by contacting support.
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements).
• Data portability: Export your ranking history, reports, and profile data in machine-readable format (CSV or JSON).
• Revoke access: Disconnect Pinwarden from your Google Business Profile at any time through your Google account permissions page.
• Opt out of marketing: Unsubscribe from promotional emails using the link in any marketing message.

To exercise these rights, email support@pinwarden.com. We will respond within 30 days.

International data transfers

Pinwarden is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using our service, you consent to this transfer.

We rely on standard contractual clauses approved by the European Commission for transfers of personal data from the EU to the United States.

Children's privacy

Pinwarden is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it immediately.

Changes to this privacy policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and update the "Effective date" at the top of this page.

Continued use of Pinwarden after a policy update constitutes acceptance of the new terms. If you do not agree to the changes, you may cancel your account.

Contact us

For privacy questions, data access requests, or deletion requests:

Email: support@pinwarden.com