This Privacy Policy explains how PinScout ("we", "us"), operator of pinscoutleads.com (the "Service"), collects, uses, and protects information. It covers two distinct things: (a) the personal data of you, our customer, and (b) the business-listing data you generate using the Service.
1. Information We Collect About You
| Category | Examples | Why |
|---|---|---|
| Account data | Username, email address, hashed password | Create and secure your account, send verification and service emails |
| Billing data | Purchase records, credit balance, plan tier | Fulfil purchases and meter usage. Card details are handled by Paddle — we never see or store full card numbers. |
| Usage data | Crawls run, API requests, timestamps, IP address, log data | Operate the Service, prevent abuse, provide support, improve reliability |
| Communications | Emails and support messages you send us | Respond to and support you |
2. Business-Listing Data ("Leads")
When you run a crawl, the Service compiles publicly available business information (e.g. business name, category, address, phone, website, and publicly listed social profiles) from online sources and delivers it to you. This data may occasionally include the contact details of sole traders or individuals who operate a business publicly.
- You are the controller of the leads you export and use; PinScout acts as a processor providing you the tooling to compile them.
- You are responsible for having a lawful basis to process and contact the businesses/individuals in your leads, and for honoring opt-out, do-not-contact, and applicable privacy laws (e.g. GDPR, CCPA/CPRA, the Philippine Data Privacy Act).
- If a person asks us to remove their information from data we hold, we will act on such requests — see Your Rights.
3. How We Use Information
- To provide, maintain, and secure the Service and your account.
- To process purchases and prevent fraud and abuse.
- To send transactional email (verification, receipts, service notices) and, where permitted, important product updates.
- To analyze usage in aggregate to improve performance and features.
- To comply with legal obligations and enforce our Terms of Service.
We do not sell your personal account data.
4. Sharing & Sub-processors
We share information only with service providers who help us run PinScout, under confidentiality obligations:
| Sub-processor | Purpose |
|---|---|
| Paddle | Payment processing & Merchant of Record (billing, tax, receipts) |
| Resend | Transactional email delivery |
| Cloud infrastructure & storage providers | Hosting, database, and encrypted result storage |
We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition. We do not otherwise sell or rent your personal information.
5. Cookies & Local Storage
We use strictly necessary cookies and browser local storage to keep you signed in (session and JWT tokens) and to remember basic preferences. We do not use third-party advertising trackers.
6. Data Retention
Account and billing records are retained while your account is active and as required for legal, tax, and accounting purposes. Crawl results are retained per your plan's retention window and can be deleted by you at any time. When you delete a job or your account, associated result data is removed from active systems on a rolling basis.
7. Security
We protect data with encryption in transit (TLS), hashed passwords, access controls, and encrypted result storage. No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting your data as required by law.
8. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. To exercise these rights — or to request removal of information about you from lead data we hold — email [email protected]. We will respond within the timeframe required by applicable law.
9. International Transfers
We and our sub-processors may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.
10. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children.
11. Changes
We may update this Policy; material changes will be posted here with a new "Last updated" date.
12. Contact
Privacy questions or requests: [email protected].