DRAFT — pending legal review. Not yet in force.
Privacy Policy
DRAFT — not yet in force. Working draft for legal review (GDPR).
Last updated: 9 November 2026
Controller#
[LEGAL ENTITY NAME, ADDRESS — to be completed], contact support@pinnfeed.io.
What we collect#
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email, password hash | Account and login | Contract | Life of the account + 30 days |
| API key hashes, key names, usage counters | Authentication, limits, usage stats | Contract | Life of the account |
| IP address, request logs | Security, abuse prevention, debugging | Legitimate interest | 30 days |
| Billing data (via Stripe) | Payments, invoices, tax | Contract, legal obligation | As required by tax law |
We do not sell personal data. We do not use advertising cookies. The site uses only a strictly necessary session cookie when you log in.
Processors#
- Stripe (payments) — stripe.com/privacy
- Amazon Web Services (hosting, EU region) — aws.amazon.com/privacy
- [Email provider — to be completed] (transactional email)
International transfers rely on the processors' Standard Contractual Clauses.
Your rights#
You can access, correct, export or delete your data, object to processing and complain to your data-protection authority (in Spain, the AEPD). Email support@pinnfeed.io. You can delete keys at any time in the dashboard.
Security#
Passwords are hashed with scrypt; API keys are stored only as SHA-256 hashes; traffic is encrypted with TLS.