Privacy policy
This policy explains what Pinli collects, why we use it, and the choices available to account holders and visitors.
Account information
When you create an account, we store your name, email address, password hash or connected sign-in account, pages and uploaded content, settings, plan, and billing status. We may also store the IP address, browser and device information associated with a sign-in or session to protect accounts and prevent abuse.
We use this information to provide Pinli, authenticate you, maintain your pages, process your instructions, provide support, secure the service, and administer subscriptions. These uses are necessary to provide the service you request or support our legitimate interests in operating it safely.
Payments
Dodo Payments is the merchant of record for Pinli plans and packs. It processes payment details, taxes, invoices and refunds under its own privacy terms. Pinli receives identifiers and status information needed to activate and manage your purchase, but does not receive your full card number.
Page visits and analytics
For a page view or block click, Pinli may record the time, referring site, campaign tags, country derived by our hosting provider, device type and browser type. We do not save a visitor's raw IP address in page analytics. To limit duplicate counts, we derive a one-way identifier from the IP address and browser using a secret that changes daily. It cannot be used by Pinli to recognise a visitor across different days, but it is still treated as pseudonymous information.
We use PostHog Cloud EU to understand how people use Pinli, identify errors and improve the service. It may receive page and screen views, marketing interactions, feature usage, referring domains, campaign tags, device and browser information, approximate location and an account identifier for signed-in users. We may also record sessions in the dashboard and page editor. Inputs are masked, user-created page content is blocked from recordings, and public Pinli pages are not recorded. We do not intentionally send passwords, payment details, private messages, form contents or page visitor submissions to PostHog.
Pinli does not use advertising cookies on public pages. Essential cookies may be used for sign-in, security and password-protected pages. Browser analytics is on by default and may use browser storage. You can turn it off in the privacy settings below or in your account settings. We also measure confirmed account registrations, trial starts and payments on our server; this browser setting does not stop those events.
A page owner may add Google Analytics, Plausible or Meta tools to their page. Those tools are controlled by the page owner and may collect information or set cookies under their own terms. Where consent is required, the page owner is responsible for obtaining it before enabling those tools.
Information submitted to a page owner
Newsletter and download forms, contact and enquiry forms, volunteer forms, polls and booking requests send information to the owner of that page. Depending on the form, this can include a name, email address, phone number, message, booking time, party size or stay dates. Pinli stores the submission so the owner can view and manage it. Booking participants may also receive transactional copies and status updates.
The page owner decides why they collect this information and how they use it. Contact the page owner about a submission or to exercise rights relating to it. Pinli acts as a service provider for the owner when hosting and delivering that information.
Purchase and donation buttons generally open a checkout operated by the page owner or their provider, such as Stripe, PayPal, Shopify, Gumroad or Lemon Squeezy. Pinli records the click. If an owner connects a supported shop, Pinli may also store order details reported by that shop, including the product, amount and buyer email, for display to the owner.
Services that process information for us
We use Cloudflare for hosting, storage, caching and network security; Turso for the application database; Amazon SES for email; Dodo Payments for Pinli billing; PostHog for product analytics; and Google, Facebook or Apple when you choose one of those sign-in options. Page owners may connect newsletter and commerce providers, which receive information at their direction.
These providers may process information outside your country. We rely on the safeguards offered by the provider and any transfer mechanism required by applicable law.
Retention
We keep account and page information while the account is active. If an account has no active plan, its pages and associated blocks, uploads, analytics and visitor submissions are deleted after 90 days; warning emails are scheduled after 60 and 80 days. The account remains available so its owner can subscribe again.
Session recordings are kept for 30 days. Other product analytics is kept only for as long as it is useful for understanding and improving Pinli, subject to the retention controls available from our analytics provider. When an account is deleted, we also delete or anonymise product analytics associated with that account where it can be identified, subject to technical and legal retention requirements.
Deleting an account removes its pages, uploads, analytics, sessions and visitor submissions from Pinli's active database. Payment providers and other connected services may retain records independently where required for tax, accounting, fraud prevention or legal compliance. Temporary caches, backups and security logs may expire on a separate schedule.
Your choices and rights
Account holders can correct their profile and page information, export available analytics, disconnect integrations, change available privacy settings, cancel a plan and delete their account from the dashboard. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to or receive a copy of personal information, and to withdraw consent where processing relies on consent.
Pinli measures visits to its marketing and app pages, feature usage, errors, and privacy-masked dashboard sessions. Customer pages are not recorded by this browser analytics. Confirmed account, trial, and payment milestones are measured separately.
To make a privacy request or raise a concern, email privacy@pinli.co. We may need to verify your identity. You may also complain to the data protection or privacy authority where you live.
Changes to this policy
We may update this policy when Pinli or the law changes. We will change the date above and notify account holders when a change materially affects how we use their information.