Privacy Policy

This policy explains what information PinRank (“we”, “us”) collects when you use our website and service, how we use it, and the choices you have.

Information we collect

• Waitlist and account details: your email address, and the name and password (stored hashed by our authentication provider) you use to create an account.
• Google account and Business Profile data: when you connect Google, we receive an access token for the Google Business Profile API. Through it we read your business locations, listing details (such as hours, categories, photos, and description), and customer reviews, and we post review replies you approve or have set to publish automatically.
• Settings you choose: such as your reply tone, sign-off, and which star ratings require your approval.
• Billing information: payments are processed by Stripe. We receive your subscription status and limited billing details, never your full card number.
• Usage data: privacy-friendly, cookieless page analytics (Vercel Web Analytics) and standard server logs.

How we use your information

• To score your Business Profile, build your task list, and draft and post review replies.
• To run your account, process payments, and send service emails (for example, your waitlist invitation).
• To keep the service secure, fix problems, and understand how the website is used.

We do not sell your personal information, and we do not use your data for advertising.

Google user data

PinRank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to provide the features you see in PinRank. We do not use it for advertising, we do not sell it, and we do not use it to train general-purpose AI models. Humans at PinRank do not read this data unless you ask us to for support, it is needed for security, or the law requires it.

Your Google access tokens are encrypted at rest. You can revoke PinRank's access at any time from your Google Account permissions page.

Service providers

We share data only with providers that help us run PinRank, under contracts that limit their use of it:

• Supabase: database and authentication.
• Vercel: hosting and web analytics.
• Anthropic: generates review reply drafts from review text and your tone settings. Anthropic does not train its models on this data.
• Stripe: payment processing.
• Resend: transactional email delivery.

Retention and deletion

We keep your data while your account is active. When you delete your account or disconnect Google, we delete the associated Business Profile data and tokens within 30 days, except where we must keep records (such as invoices) by law. To be removed from the waitlist or request deletion, email us.

Your rights

You can ask to access, correct, export, or delete your personal information by emailing hello@pinrank.io. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR.

Changes

If we make material changes to this policy, we will update the date above and notify account holders by email.

Contact

Questions about privacy: hello@pinrank.io.