Privacy Policy

Pinseed ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Personal Information You Provide:

• Account Information: Name, email address, phone number, password
• Payment Information: Credit card details (processed securely via Stripe - we never store full card numbers)
• Profile Information: Target zip codes (investors), banking info for payouts (spotters)
• Property Submissions: Addresses, photos, and notes submitted by spotters and homeowners

Information We Collect Automatically:

• Usage Data: Pages viewed, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Location Data: GPS coordinates when dropping pins (spotters only)
• Cookies: Session tokens, authentication cookies, analytics

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Pinseed platform
• Process payments and subscriptions via Stripe
• Send transactional emails (receipts, unlock confirmations, alerts)
• Match pins to investors based on target zip codes
• Verify closed deals for spotter bounty payouts
• Improve our services and develop new features
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations (tax reporting, subpoenas)

3. How We Share Your Information

We share information with:

• Service Providers: Stripe (payments), Resend (emails), Vercel (hosting), ATTOM/BatchData (skip trace data)
• Investors: Skip trace data and Gold Pin details only after they pay to unlock
• Homeowners: We notify homeowners when an investor unlocks their Gold Pin
• Legal Requirements: If required by law, court order, or government request

We DO NOT:

• Sell your personal data to third-party marketers
• Share investor contact info with homeowners (one-way privacy protection)
• Publicly display spotter or homeowner email addresses

4. Data Security

We implement industry-standard security measures:

• Encryption: HTTPS/TLS for all data in transit
• Authentication: Secure password hashing (bcrypt) and session management
• Payment Security: PCI-compliant via Stripe (we never store full card numbers)
• Database Security: Serverless PostgreSQL with role-based access control
• Monitoring: Sentry error tracking and security alerts

Note: While we use best practices, no system is 100% secure. Users are responsible for keeping their passwords confidential.

5. California Privacy Rights (CCPA)

California residents have the right to:

• Know: Request what personal data we collect and how it's used
• Delete: Request deletion of your personal data (subject to legal exceptions)
• Opt-Out: Opt out of data "sales" (though we don't sell personal data)
• Non-Discrimination: Exercise these rights without penalty

To exercise these rights, email privacy@thepinseed.com with "CCPA Request" in the subject line.

6. Homeowner Data Deletion Requests

Homeowners who submit Gold Pins may request deletion at any time by emailing support@thepinseed.com. We will remove your property from the platform within 7 business days. Note: Investors who already unlocked your data will retain access to the information they purchased.

7. Cookies & Tracking Technologies

We use cookies for:

• Authentication: Keep you logged in via NextAuth.js session cookies
• Analytics: Track platform usage to improve features (anonymized data)
• Preferences: Remember settings like target zip codes

You can disable cookies in your browser settings, but this may limit platform functionality.

8. Third-Party Links

Pinseed may contain links to external sites (e.g., Stripe Billing Portal, property tax websites). We are not responsible for the privacy practices of these third parties. Please review their privacy policies before sharing information.

9. Children's Privacy

Pinseed is not intended for users under 18 years old. We do not knowingly collect information from minors. If we discover a user is under 18, we will delete their account immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to active users. The "Last Updated" date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.