Privacy.

What we collect

• · Account data — your email, display name, hashed password, and your authentication provider if you sign in with one.
• · Workspace content — the leads, notes, tasks, events, and tags you create inside Pinvale.
• · Billing data — handled by Stripe. We never see or store your card number.
• · Operational logs — server-side error and request logs needed to keep the app running. Retained for 30 days.

What we don't collect

• · No third-party advertising trackers.
• · No session replay or heatmaps.
• · No marketing pixels on the marketing site.
• · No selling or renting your data, ever.

How addresses are geocoded

When you add or import an address, we send the address string to a geocoding provider to convert it into latitude and longitude. The provider does not retain the lookup. We cache the result on your workspace so we don't re-bill the lookup if you re-edit the same lead.

Where your data lives

Your workspace data is stored in a managed Postgres database on Supabase, with row-level security enforcing that only you and your invited workspace members can read or write your rows. Backups are encrypted at rest. Data is hosted in US regions.

Cookies

Pinvale uses a session cookie to keep you signed in and a preference cookie for theme (light / dark / system). No third-party cookies, no tracking cookies.

Your rights

You can export all your workspace data as CSV from settings any time. You can delete your account, which removes your workspace data within 30 days, by emailing us. Residents of California, the EU, and the UK have additional rights under CCPA/GDPR; reach out and we'll honor them.

Changes

If we change anything material, we'll update the date at the top of this page and email account holders. Substantive changes take effect 30 days after notice.

Contact

Questions about this policy or about how your data is handled go to [email protected].