Privacy Policy

Pinnnng, Inc. ("Pinnnng", "we", "us") is a Delaware corporation headquartered at 55 Newark Ave, Jersey City, NJ 07302, USA. When you use the Pinnnng platform as a customer, we are a data controller for account and billing data, and a data processor for Customer Content you upload and play on your screens.

We do not sell personal data to third parties. We do not use Customer Content to train any machine learning model without an explicit, separate opt-in.

For customers and users in the European Economic Area, United Kingdom and Switzerland, we rely on the following lawful bases under GDPR:

• Contract performance — to provide the Service you signed up for.
• Legitimate interest — to operate, secure and improve the Service and to prevent fraud.
• Legal obligation — to comply with tax, accounting and regulatory requirements.
• Consent — for analytics cookies and optional marketing communications. Consent may be withdrawn at any time.

We share data with carefully vetted sub-processors who provide the infrastructure we run on:

• Cloud infrastructure — AWS (US, EU regions) for compute, storage and databases.
• Payments — Stripe for payment processing.
• Email — Postmark for transactional email.
• Support — Intercom for in-product chat.
• Analytics — PostHog, self-hosted in our EU region.

A current list of sub-processors is published at pinnnng.com/subprocessors and updated at least 30 days before any addition.

We retain account and billing data for as long as your account is active, plus the period required by tax and accounting law (generally 7 years). Customer Content is retained until you delete it; after account termination, we keep a 90-day recovery window before scheduled deletion.

Telemetry and logs used for security and debugging are retained for 90 days, then aggregated or deleted.

Depending on your jurisdiction, you may have the right to:

• Access a copy of your personal data;
• Correct inaccurate or incomplete data;
• Delete your personal data, subject to legal retention requirements;
• Port your data to another service in a machine-readable format;
• Object to or restrict certain processing, including direct marketing;
• Withdraw consent where consent is our lawful basis.

To exercise any of these rights, email privacy@pinnnng.com. We'll respond within 30 days.

Pinnnng is a global service. Personal data may be transferred to and processed in the United States or other countries where our sub-processors operate. For transfers out of the EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, UK IDTAs, plus supplementary technical and organizational measures.

Enterprise customers may elect EU-only data residency. Contact sales for details.

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided personal data to us, contact privacy@pinnnng.com and we will delete it.

We review this policy at least annually. Material changes are notified at least 30 days in advance by email and via in-product notice. The "Last updated" date at the top always reflects the effective version.

Pinnnng Data Protection Officer
55 Newark Ave, Jersey City, NJ 07302, USA
privacy@pinnnng.com

For EU residents, our EU representative under Article 27 GDPR can be contacted at eu-rep@pinnnng.com.