At PinShare (operated by Magic Life LLC), we value your privacy. This policy explains how we collect, use, and protect your personal information in compliance with GDPR and CCPA.
1. Information We Collect
1.1 Information You Provide
- Account information: Email, name (optional)
- Content: Pin locations, photos, notes you create
- Waitlist: Email, name (optional), referral source
1.2 Information Collected Automatically
- Anonymized IP hash: We convert your IP to an irreversible hash to prevent abuse
- Device information: Browser type, operating system (to optimize experience)
- Location data: Only when you create a pin and with your consent
- Approximate country/city: Via Cloudflare geolocation for localized content
1.3 Information We Do NOT Collect
- Precise location without your explicit consent
- Payment information (handled by Stripe)
- Location history or continuous tracking
- Third-party tracking cookie data
2. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide location sharing service | Contract performance |
| Send launch updates | Consent (waitlist) |
| Prevent abuse and fraud | Legitimate interest |
| Improve the service | Legitimate interest |
3. Cookies and Similar Technologies
We use only essential cookies required for service operation:
- Session cookies: To keep you logged in
- Language preference: To remember your preferred language
We do NOT use: Advertising tracking cookies, third-party tracking pixels, or fingerprinting technologies.
4. Data Sharing
We do not sell your personal information. We share data only with:
- Infrastructure providers: Cloudflare (hosting, CDN)
- Payment processor: Stripe (for transactions)
- Authentication: WorkOS (for secure login)
- Authorities: When required by law
5. Data Retention
- Waitlist data: Until launch, then converted to accounts or deleted upon request
- Account data: While you maintain an active account
- Pins and content: Until you delete them or your account expires
- Server logs: 30 days
6. Your Rights (GDPR/CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interest
- Non-discrimination: (CCPA) We will not discriminate if you exercise your rights
To exercise these rights, contact us at privacy@pinshare.app. We will respond within 30 days.
7. Data Security
We protect your data through:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest
- Secure passwordless authentication (WorkOS AuthKit)
- IP anonymization through hashing
- Cloudflare infrastructure with DDoS protection
8. International Transfers
Your data may be processed on servers located outside Puerto Rico. We use providers that comply with approved transfer mechanisms (SCCs, certifications).
9. Children's Privacy
PinShare is not directed to children under 16. We do not knowingly collect information from minors. If you discover that a minor has provided data, contact us to delete it.
10. Changes to This Policy
We may update this policy periodically. We will post significant changes in the application and update the "last updated" date.
11. Contact
For privacy questions or to exercise your rights:
Magic Life LLC
Email: privacy@pinshare.app
Puerto Rico
For complaints about data handling, you may contact the data protection authority in your jurisdiction.