Privacy policy

PinPost is a local board where neighbors pin what they need and get private replies. It is run by Desert West Digital, LLC (“PinPost”, “we”). This policy explains what we collect, why, and the choices you have. We built PinPost to need as little about you as possible: neighbors do not make an account, and nobody is asked for an address.

What we collect

• Pins. What you write, the kind of pin, an optional first name, and any photos you add. Photos are re-encoded in your browser before upload, which removes camera details such as GPS coordinates.
• Location, approximately. You choose a neighborhood, type a ZIP code, or let your browser locate you once. Your browser turns that into a neighborhood; we store the neighborhood and a point placed at random within about a mile and a half of its center. We never receive your address or your exact position, and other people see only the neighborhood and a 5-mile circle.
• Messages. Replies and conversations about a pin. They are private between the two people in them. Your phone number is shared only if you tap the button to share it in a conversation.
• Your device key. Instead of an account, your browser holds a random key in its storage (and, on pinpost.community, in a cookie so our state sites recognize you). We store only a one-way hash of it. One-time links let you add another device; you can sign other devices out.
• Business accounts. Email and password (the password is handled by our authentication provider and stored only as a hash), business name, your name, phone number, trades, service area, an optional license number and description. Your public page shows the business name, description, trades, area and the pins you were credited for. Your phone and email are not shown publicly.
• Payments. Stripe handles the Business plan checkout. We receive your email, a customer reference and whether your subscription is active. We never see or store card numbers.
• Notifications. If you turn them on, your browser gives us a push address and keys to deliver them, plus the alert types and area you chose.
• Support messages and reports. What you send, the topic, the page you were on, and an email address if you give one. Reports record the pin or conversation and the reason.
• Technical data. Our hosting and database providers process IP addresses and request logs to run and protect the service. Business sign-ups are rate-limited using a hash of the IP address.

What we do not do

• We do not sell or rent personal information, and we do not share it for advertising.
• We do not use advertising or analytics trackers, and we do not build profiles of you.
• We do not show your exact location to anyone, including businesses.

How we use it

• To run the board: show pins, deliver replies and notifications, and credit who helped.
• To keep it safe: rate limits, screening public text for phone numbers and links, reviewing reports, and stopping spam and abuse.
• To run business accounts and billing, and to answer support messages.
• To comply with the law and respond to valid legal requests.

Who else handles it

We use a small set of providers, each only to run PinPost: Supabase (database, sign-in and photo storage), Cloudflare (hosting and delivering support email), Stripe (payments), and the push services run by browser makers such as Google, Apple and Mozilla (delivering notifications). Weather alerts are fetched by your browser from the U.S. National Weather Service using the city's center point, not yours. We may disclose information if the law requires it, or to protect someone's safety.

How long we keep it

• Needs and questions come off the board after 14 days, heads-ups after 7, or sooner when you resolve them. The pin and its conversations stay in your history until you delete the pin.
• Deleting a pin removes it and every conversation on it right away. Photo files from deleted pins are cleared from storage on request; ask through support.
• Business accounts are kept until you ask us to close them. Billing records are kept as long as tax law requires.
• Support messages are kept as long as needed to help you and keep a record of what was decided.
• Push addresses are removed when you turn notifications off or when they stop working.

Your choices and rights

You can delete any of your pins at any time, sign out your other devices, turn notifications off, and choose which nearby alerts you get. To see, correct, export or delete what we hold about you, contact support. Because neighbors have no account, we may ask you to send the request from the device that holds your pins. We answer requests within 45 days.

Residents of California and other states with privacy laws have the right to know what personal information we collect and how we use it, to correct it, to delete it, and not to be treated differently for using these rights. We do not sell personal information or share it for cross-context behavioral advertising.

Children

PinPost is for adults. You must be 18 or older to use it. We do not knowingly collect information from children under 13; if you believe a child has used PinPost, contact us and we will delete it.

Security

Our database is only reachable through checked server functions, device keys are stored as hashes, device links work once for 15 minutes, and data travels over encrypted connections. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Changes

If we change this policy in a way that matters, we will update the date above and say so on the board before the change takes effect.

Questions? Contact support or email [email protected].