Privacy Policy

1. 0xBrewing(the "Company") is the controller of personal data processed for Pinnn.
2. This policy applies to members, Pinpage visitors, people contacting support, and buyers.
3. Display names, introductions, profile images, links, content, and contact paths published on a Pinpage or PinAI Page are globally public and may be collected or cached by search engines and AI services.

1. Account and login data: email, name, profile image, login method, and social-login identifier
2. Pinpage and PinAI Page data: @ID, display name, bio, images, links, topics, keywords, public contact details, content, channel-verification status, and edit history
3. Import and drafting data: external URLs supplied by the user, publicly imported information, drafting requests, and outputs
4. Usage and security data: IP address, device and browser, access time, referrer, page views, button and link clicks, errors, and abuse records
5. Product analytics: an anonymous local-storage identifier, feature events, and session replay with inputs and sensitive content masked
6. Support and messaging data: inquiry content, email delivery, open, click and unsubscribe status, and conversion from Company outreach to signup or Pinpage creation
7. Billing data when used: name, email, date, amount, currency, status, and Paddle customer, transaction, subscription, and refund identifiers. The Company does not directly store full card numbers or CVCs.
8. Data comes from user input, Google login, service use, public-page imports, support, and providers such as Paddle.

1. Signup, login, account and permission management, and representative-channel verification
2. Pinpage publication and management, PinAI Page creation, search metadata, and public directories
3. External-page imports, drafting assistance, and other requested features
4. Support, service and security notices, abuse prevention, and dispute handling
5. Statistics, product analytics, and masked session replay for quality, error, and journey analysis
6. Subscription payment, renewal, cancellation, refund, tax, receipts, and legal compliance
7. Benefits, events, and product updates where the user has opted in
8. Limited use of public Pinpages in Pinnn examples, landing pages, official social accounts, and press materials to demonstrate the service

1. Account and Pinpage data is kept until account deletion, user deletion, or completion of the purpose. The Company may not be able to directly remove external search results or caches created before unpublishing.
2. Product analytics and masked replay are retained only while reasonably needed for improvement and error analysis and within the analytics project's retention settings, then deleted or anonymized when the purpose ends or a valid deletion request is completed.
3. Marketing contact data is used until opt-out or account deletion. A minimal suppression record may be retained to prevent future messages and resolve disputes.
4. Where Korean law applies, records are retained for 6 months for advertising, 5 years for contracts, withdrawal, payment, and supply, 3 years for consumer complaints and disputes, and 3 months for access logs.
5. Legally retained data is separated, used only for that purpose, and destroyed when the period ends.

1. The Company does not sell personal data and discloses it only with consent or a request, to perform a contract, or where law permits.
2. When Paddle Checkout is used, the relevant Paddle entity acts as official seller or authorized reseller and an independent controller for buyer identity, billing, device, transaction, tax, subscription, and refund data.
3. When Google login is selected, Google processes the login under its own terms and sends the permitted account identifier, email, name, or profile image to the Company.
4. Data may be disclosed to courts, law enforcement, or other competent authorities on a lawful request or as otherwise permitted to protect life, safety, and legal rights.

• Cloudflare, Inc. — United States and Cloudflare service regions — files, images, IP and request data — storage, delivery, security, and analytics proxy — encrypted transfer on upload or access — until deletion or termination
• PostHog, Inc. — United States — anonymous ID, events, masked replay and, after consent, account ID and email — analytics and error review — encrypted transfer during use — until the project retention period or purpose ends
• Brevo SAS — France and the EU — email, display name, language, delivery, open, click and unsubscribe status — service and marketing email — encrypted transfer when sent — until the purpose, opt-out, or termination
• Anthropic, PBC and OpenAI, L.L.C. — United States — bio, links, public sources, and prompts supplied to an AI feature — drafting, structuring, and search — API transfer on request — until response processing and contractual provider retention ends
• Paddle.com Market Limited or the regional Paddle entity — UK, US, or Canada — buyer and transaction data — payment, tax, receipts, subscriptions, refunds, and fraud — transfer during checkout — as required for transactions and law
• Google LLC — United States and Google service regions — login request and account identifier — optional Google login — transfer when used — under Google policy or until the connection ends

1. Pinnn uses cookies or local-storage identifiers and events to understand visits, acquisition, and feature use. Before signup the ID is anonymous; it is linked to an account only after signup and required consent are completed.
2. Session replay may run on safe public and service routes. Inputs, ordinary text, attributes, canvas, request and response bodies, and headers are masked or excluded; restricted admin and billing routes are not recorded.
3. Users may clear or restrict browser storage and may request access, deletion, or restriction through support. Restricting storage may remove analytics continuity.

1. Users may request access, correction, deletion, restriction, withdrawal of consent, and unpublishing of public pages.
2. Requests may be submitted through account settings or support and are handled after reasonable identity verification under applicable law.
3. A request may be limited where retention is required by law, another person's rights must be protected, or data remains necessary to perform a contract.
4. Users requesting permanent analytics erasure may contact support, and the Company will carry out the applicable PostHog and processor deletion workflow.

1. Data is deleted using methods intended to prevent recovery when its purpose or period ends; paper records, if any, are shredded or destroyed.
2. The Company uses reasonable access controls, encryption in transit, credential protection, logging, backup, and security review measures.
3. Data retained under law is separated from active service data.

Pinnn does not permit accounts for children under 14. Material privacy changes will be announced in advance as required by law.

• Privacy and complaint manager: Nakhwi Cho
• Email: hello@pinnn.info
• Phone: 010-8220-0472
• Address: 54, Pungseong-ro 37-gil, Gangdong-gu, Seoul, Republic of Korea