Privacy Policy

Z. Galili, trading as Pinvoi, based in the Netherlands, is the controller of the personal data described in this Policy.

For privacy questions, rights requests, account deletion, legal matters, or support, email support@pinvoi.app.

Pinvoi is for users aged 13 and older. A user aged 13 to 15 may use the service only through an account created and controlled by a parent or legal guardian. The guardian should contact us about privacy requests for that account.

If you believe a child is using Pinvoi outside these conditions or provided personal data improperly, contact us so we can investigate.

Account and authentication data. Your email address, Supabase user identifier, account timestamps, authentication records, and basic profile information returned by Google or Apple when those sign-in methods are selected.

Waitlist data. Your email address, selected App Store or Google Play beta, waitlist status, and related timestamps. Browser signals suggest a store on your device; we save the selection, not a dedicated device profile.

Submitted links and source data. Original and canonical URLs, source platform and creator details, public captions or metadata, extraction warnings, and the structured extraction result.

Spots and place data. Place names, addresses, coordinates, categories, images, descriptions, website links, source links, Google Place identifiers, confidence information, and related metadata.

Collections and activity. Collection names, Spot memberships, saved and unorganized Spots, collection suggestions, and relevant timestamps.

Device-local data. Authentication session information, pending shared URLs, display preferences, and similar settings stored on your device.

Technical and security data. IP address, an irreversible keyed hash used for waitlist rate limiting, request timing, request identifiers, device or browser information, service logs, and error details.

Support correspondence. Your email address and the contents and metadata of messages you send to us.

When you submit a link, our servers request publicly available content from the source website or social platform. The requested URL and relevant public text or metadata may be processed by retrieval services, Google Gemini, and Google Places to identify and structure a place.

We do not intentionally send your Pinvoi account email to Gemini or Google Places as part of place extraction. Source websites may receive the server address, user agent, requested URL, and normal request information when content is retrieved.

We use personal data to:

• create and secure accounts and keep you signed in;
• retrieve, extract, save, organize, search, and display Spots and Collections;
• manage beta access and respond to support or privacy requests;
• diagnose failed imports, prevent abuse, and keep the service reliable and secure;
• understand basic operational usage through service-level counts; and
• meet legal obligations and establish, exercise, or defend legal claims.

Where EU or UK data-protection law applies, we rely on performance of our agreement with you; our legitimate interests in operating, securing, supporting, and improving the beta; compliance with legal obligations; and consent where the law requires it for a specific optional activity.

You may object to processing based on legitimate interests. We will assess the request against our reasons for processing and your rights.

We use these categories of recipients to operate Pinvoi:

• Supabase for authentication and the Postgres database.
• Google for Gemini extraction, Places information, and Google sign-in when selected.
• Apple for Apple sign-in when selected.
• Railway for API hosting, networking, and operational logs.
• Vercel for website hosting, server functions, networking, and operational logs.
• Public source websites, social platforms, and retrieval services needed to fetch a submitted link.

We may disclose information where required by law, to protect rights and security, or in connection with a lawful transfer of the service.

We do not sell personal data. The current beta has no advertising network, cross-service behavioral advertising, or third-party product-analytics SDK.

Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

Authentication uses cookies or similar technologies where the web service needs them. The mobile app stores session information and product preferences locally. These technologies provide requested features, security, and continuity.

Pinvoi does not currently use optional advertising or product-analytics cookies. If that changes, we will update this Policy and request consent where required before enabling them.

Account, Spot, Collection, and activity data is generally kept while your account remains active. Individual records are removed when you delete them, subject to normal processing and backup cycles.

Waitlist data is kept while reasonably needed to manage invitations and follow-up, or until you withdraw. Support records and technical logs are kept as reasonably needed for support, security, incident response, disputes, or legal compliance. Rate-limit attempt records are routinely deleted after they are no longer needed.

When data is no longer needed, we delete or anonymize it. Limited copies may temporarily remain in backups or be retained where law, security, fraud prevention, or a legal claim requires it.

To request deletion, email support@pinvoi.app from the address connected to your account and state that you want your Pinvoi account deleted.

We may ask for information needed to verify the request. After verification, we will delete the account and associated Spot, Collection, and source data unless we must retain limited information for a legal or security reason. Deletion is permanent.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of data you provided; and withdraw consent without affecting processing that was lawful before withdrawal.

Send requests to support@pinvoi.app. We may need to verify your identity and will respond within the period required by applicable law. You may also complain to the Dutch Data Protection Authority or the competent authority where you live or work.

We use reasonable technical and organizational safeguards, including authenticated access, row-level database controls, transport encryption, server-only secrets, and rate limiting. No online service can guarantee absolute security. Use a strong, unique password and contact us if you suspect unauthorized access.

We may update this Policy when the service, providers, or law changes. The effective date and version identify the current Policy. We will provide reasonable notice of material changes.

We will review this Policy before launching payments, analytics, advertising, collaboration, itinerary generation, or another material processor.