Privacy Policy

Last updated: November 6, 2026

This Privacy Policy explains what data we collect, how we use it, on what legal bases, who we share it with, how long we keep it, your rights, and how to contact us.

1) Who we are & scope

Controller: Pinsvit (pinsvit.com). This Policy applies to our website, mobile apps, the Pinsvit Business tools, our MCP server for AI agents, and related services.
You can contact us about privacy through our Contact page.
Related documents: Terms of Use, Business Policy, Community Guidelines.

2) Data we collect

Account data: name, e-mail, and profile photo if provided (for example via Google/Apple sign-in, or e-mail and password). If you sign in with Google, we copy your Google profile photo into our storage. Your profile may also hold a description and contact details you add.
Content data: posts, photos, comments, likes, map pins, events, and business pages you create. Content may include locations you choose (e.g., event venues) and any personal data you voluntarily include. Please do not share more personal data than necessary, especially about other people.
Booking data: when you book a place, we store the place, service, time, price, your name, any contact details or notes you add, the booking's status history (for example confirmed, cancelled, or marked as a no-show) and its bill, which records payments made at the place.
Business and staff data: if you claim or manage a business listing, we process the information you provide (such as business name, address, contact details, services, opening hours, and your role). In some cases, we may ask you to provide additional evidence of your authority (for example, documents you voluntarily upload) to verify ownership or resolve disputes. We use this information only for verification and related security or fraud-prevention purposes.
Customer records kept by businesses: for each place, we keep a list of customers who have booked there, with their booking history. Staff of that place can add a private name (alias) or note for a customer, or block a customer from booking. Staff can also book on behalf of someone without a Pinsvit account; then the booking holds the name and the contact details staff enter, and we may send that person a link to claim the booking with their own account.
Place listings from public sources: many places on the map come from open datasets (Overture Maps Foundation, which includes OpenStreetMap data). A listing can include a business's name, address, phone number, e-mail, website and social links. If a listing contains your personal data (for example as a sole trader), you can ask us to correct or remove it, or claim the listing.
AI agents you connect: if you let an AI assistant (such as Claude, ChatGPT or Meta AI) use Pinsvit on your behalf, we store which agent you authorised, when, and the access you granted. The agent's actions (for example a search or a booking) are processed like your own.
Notification settings: if you connect Telegram notifications, we store your Telegram chat ID, the Telegram username or first name we show as the connected account, and when you connected it. If you turn on e-mail notifications, we store the e-mail address of your account at that moment, which we show in the app, and when you turned it on.
If you purchase a subscription or other paid service, our payment provider collects your billing details and processes your payment information. We do not store your full credit card details. We receive limited billing information such as a transaction ID, status, plan, and subscription validity period.
Registration and sign-in data: when you create an account, we store your IP address and an approximate country code derived from technical information provided by our infrastructure providers; each time you sign in, we update your sign-in time and approximate country. We use this to help secure accounts, detect abuse, and apply country-based feature rules.
Location data: we distinguish between “precise” and “approximate” location:
• Precise device location (e.g., GPS/Wi-Fi): used when you grant permission, for example to centre the map near you. The app remembers the last map position on your device. We do not build a continuous movement history profile.
• Approximate (IP-based) location: we use your IP address or similar network information to infer your general region (such as country or city) to protect the Service, apply basic localisation, and show relevant content. Locations you explicitly publish as pins or events are stored as part of your content.
Usage, log & device data: our servers log requests (IP address, time, requested address, and browser or app information) to keep the Service secure and reliable. Aggregated signals such as screen navigation, feature taps, crash and performance logs, device type, and app version/OS are used to improve the user experience.
Cookie/SDK data: strictly necessary cookies and similar technologies (for example, security cookies and authentication/session tokens), and optional analytics SDKs where enabled. We do not currently use third-party advertising trackers; if that changes, we will update this Policy and ask for consent where required.

3) Why we use your data, and on what legal basis

For users in the EEA and UK, each purpose below names its legal basis under the GDPR: contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), consent (Art. 6(1)(a)) or legal obligation (Art. 6(1)(c)).

Provide the Service: create and manage accounts, authenticate users, operate the map, store and display your pins, events, and business pages. Basis: contract.
Bookings: send your booking request to the place, show it to the place's staff, let them confirm, decline, cancel, or mark it, keep its bill, and show you your bookings. Basis: contract.
Business tools: let businesses manage their places, staff, services, bookings and customer list, including bookings staff make for people without an account. Basis: contract with the business; for the customers concerned, the business's and our legitimate interest in running bookings.
AI agents: act on the requests of an agent you authorised. Basis: contract.
Place listings from public sources: show an accurate map of places people can find and book. Basis: legitimate interests.
Security and abuse prevention: protect against fraud, spam, and abuse, including preventing banned users from registering again. Basis: legitimate interests.
Apply country-based rules and safety measures: for example, we may limit the ability to create posts or events to the country where you are currently located, based on an approximate country derived from your IP address or similar technical information. This helps us comply with local rules and reduce misuse across borders. Basis: legitimate interests.
Location features: centre the map, estimate nearby content, and offer a basic localised experience where appropriate. Basis: consent for precise device location (you can withdraw it in your device settings); legitimate interests for approximate location.
Content & AI features: generate AI-enhanced descriptions or images for events and other content, where available. Basis: contract.
Business & payments: verify business ownership, manage business profiles, and process payments/subscriptions via our merchant of record or payment provider. Basis: contract; legitimate interests for verification.
Improve the Service: analyse aggregated usage and diagnostics to fix bugs, improve performance, and understand how features are used. Basis: legitimate interests; consent where the law requires it for analytics.
Communications: respond to your messages and send essential service communications (for example, security alerts or policy updates). If you work at a place on Pinsvit and connect Telegram or turn on e-mail notifications, our Telegram bot or our e-mail delivery provider sends you that place's booking notifications (new requests, withdrawn requests and cancellations by the customer). Basis: contract.
Legal & compliance: comply with legal obligations (e.g., tax laws, Digital Services Act duties), handle reports and notices, respond to lawful requests, and enforce our Terms. Basis: legal obligation; legitimate interests for enforcing our Terms.

Where we rely on legitimate interests, we have balanced them against your rights and expectations, and you can object (see section 8). We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Other users: public posts, events, comments, and business pages, with your display name and profile photo, are visible to anyone, including people who are not signed in and search engines.
Places you book with: the place's staff see your booking, your name, and the notes you add. In their customer list they also see your account e-mail, the contact details on your profile, your profile photo, and your booking history at that place. They do not see your bookings at other places.
If you work at a place: the customer you serve sees your place's name and, in booking notes, what you write to them. Your notes, aliases and blocks about a customer are never shown to the customer.
AI agents you connect: the agent receives the results of the actions it takes for you (for example search results or your bookings). The company behind the agent processes your conversation with it under its own privacy policy.
Service providers (processors), who act under our instructions and are bound by data-processing agreements:
• Hosting providers in the European Union, which run our servers and databases.
• Our content delivery, security and storage provider, which processes IP addresses and basic request logs, may set strictly necessary security cookies, stores user-uploaded content (such as photos), and provides an approximate country code for your connection, which we use for security, localisation, and country-based feature rules.
• Our sign-in provider, Google Firebase: authentication (Google/Apple and e-mail sign-in) and, where enabled, analytics and crash diagnostics.
• Our e-mail delivery provider, which sends our e-mails, including booking notifications to staff who turned them on.
Independent controllers, who process data under their own privacy policies:
• Telegram: when staff of a place you book with have connected Telegram notifications, messages about your booking are delivered to their Telegram chats. A message names the place, the time, the service and your name. When staff have turned on e-mail notifications, the same messages are also sent to their e-mail address.
• Payment providers: if you purchase Paid Services, payment processors such as Paddle act as merchant of record and process your payment details. They may share limited billing information (for example, transaction ID, plan, and country) with us.
Mapping/data providers: OpenStreetMap (OSM), Overture Maps Foundation and Lima Labs provide map data and related services so that we can display the map.
Authorities and rights-holders: we may share information when required by law, in response to valid legal requests, or to enforce our Terms/Guidelines (for example, in connection with IP or safety reports).
Business transfers: if Pinsvit is reorganised, merged or sold, your data may pass to the successor, which will remain bound by this Policy.

5) International transfers

Primary hosting: our servers and main databases are located in the European Union.
Some providers (such as our content delivery, sign-in and e-mail providers, Telegram, or payment processors) may process data outside the EEA (for example, in the United States). Where this happens, we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified providers) or Standard Contractual Clauses, as required by law. You can ask us for a copy of the relevant safeguards.

6) How long we keep data

Account and profile data: while your account exists.
Posts, comments and likes: deleted automatically after their display period (currently about 3 days); an event is kept until shortly after it ends.
Bookings and bills: kept as the booking records of the place concerned, including after you delete your account, because the business needs them for its own records and legal obligations, until the business removes the place from Pinsvit Business; removing a place deletes its bookings, including from customers' booking history.
Customer lists, staff aliases, notes and blocks: kept until the business removes them or the place leaves Pinsvit.
Records of account actions kept for security and troubleshooting: up to 30 days.
AI agent authorisations: for a limited period (currently up to 90 days), after which the agent must ask you again; a record that an authorisation ended is kept for a similar period.
Links that let someone claim a booking made for them: a few days.
Reports: as long as the reported content exists and as long as needed to handle disputes.
Server logs: kept for a short period for security and troubleshooting, then overwritten.
Banned accounts: the data needed to stop the same person from registering again is kept while the ban applies.
Business verification documents are retained only as long as necessary to verify ownership or authority and to resolve related disputes, after which they are deleted or anonymised.
A connected Telegram chat is kept until you disconnect it in the app, send /stop to our bot, or delete your account; an e-mail notification address is kept until you turn the switch off in the app or delete your account. Telegram messages already delivered stay in the recipients' Telegram chats, under Telegram's control; e-mails already sent stay in the recipients' mailboxes.
Transaction records for Paid Services are kept for tax and accounting periods as required by law (often several years, depending on jurisdiction).
Backups may keep deleted data for a limited period (up to 30 days) before it is overwritten.

7) Deleting your account

You can delete your account in the app where this option is available, or by sending a privacy request through our Contact page from your account's e-mail address.
Deleting your account removes your profile, your media and your notification settings, signs you out everywhere, ends your AI agent authorisations, and ends your access to places you own or work at (their listings stay on the map). Bookings you made stay in the records of the places concerned (see section 6).

8) Your rights

EEA/UK: you have rights to access, rectification, erasure, restriction, portability, and objection, including to processing based on legitimate interests, and to withdraw consent at any time without affecting earlier processing.
US (including California, Virginia, Colorado, Connecticut): you may have rights to access, deletion, correction, and portability of certain personal information, and protection from discrimination or retaliation for exercising your rights.
We do not sell personal information or use it for cross-context behavioural advertising.
California (CPRA): we do not “sell” or “share” personal information (including for cross-context behavioural advertising). We may process precise location to provide core features you request (such as centring the map), but we do not use Sensitive Personal Information, including precise geolocation, to infer characteristics about you or for unrelated secondary purposes. Because of this, the CPRA “Right to Limit the Use of My Sensitive Personal Information” does not apply to our current practices.
To exercise your rights, send a privacy request through our Contact page. We will verify your request (usually by replying to your account's e-mail address) and respond within one month, or within any shorter period required by local law. We provide a copy of your data in a common machine-readable format on request.
If you booked at a place on Pinsvit, the business may also hold your data in its own systems; requests about that data can go to the business directly.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe a violation occurred.

9) Children

Pinsvit accounts are for people aged 16 and over, wherever they live, or older where local law requires. In some countries we ask for your birth month and year at sign-up to check this; the check runs on your device, and we do not receive or keep them.
We may hold data about a child under 16 when a parent, guardian or a place's staff books for them. It is limited to what the booking needs.
We remove accounts or content that violate our age rules or applicable child-protection laws. If you believe a child under 16 has an account, report it in the app or through our Contact page.

10) Security

We use technical and organisational measures to protect personal data (for example, encryption in transit, access controls, and limited access to production systems).
No online service is 100% secure; please keep your credentials confidential and let us know promptly if you suspect unauthorised access.

11) Cookies, local storage & choices

We do not set cookies ourselves. Our security provider may set strictly necessary security cookies to protect the Service from bots and attacks.
We use your device's local storage for things the Service needs or that you choose: your sign-in session (kept by our sign-in provider), your language choice, whether you dismissed the language suggestion, the last map position, and display preferences. These are strictly necessary or remember your own settings, so they do not need consent.
We do not currently use tracking cookies for advertising. If we enable optional analytics or advertising, we will ask for your consent where the law requires it. Third-party services such as payment providers (for example Paddle) may place their own cookies during checkout to prevent fraud and complete the transaction.
You can control permissions in your device or browser settings (for example, location, notifications, photos). If you deny location permissions, some map features may be limited, but the core Service will still be available.
You can sign out at any time, and disconnect Pinsvit from your Google or Apple account in that account's settings.

12) Moderation, reports & notices

For IP or illegal-content reports, use the report form. We use the reporter's details to handle the report, to ask follow-up questions, and to tell them our decision; for copyright and trademark notices, we may share the reporter's name and the notice with the person whose content was reported so that they can respond. Basis: legal obligation; legitimate interests.
When you report a post, comment, place or booking in the app, we store the report and who made it.
We may preserve and disclose information when required by law, in response to valid legal requests, or where we reasonably believe it is necessary to protect users, prevent harm, or enforce our Terms.
We provide statements of reasons for moderation actions and an appeals channel, as described in our Terms.

13) Changes

We may update this Policy from time to time; the date at the top shows the latest version. We will tell you about material changes in the app or by e-mail.

14) Contact

Questions or concerns? Contact us through our Contact page.

15) Third-party notices

Third-party services you may use through Pinsvit. Their processing is governed by their own privacy terms:

Firebase Telegram Paddle – Privacy (Payments) OpenStreetMap Overture Maps