Privacy Policy.

Pinbook (“we,” “us,” “our”) operates the website pinbook.ai and the Pinbook scheduling application (collectively, the “Service”). This Privacy Policy explains how we collect, use, store, and share information when you use our Service.

1. Information We Collect

1.1 Account Information. When you create a Pinbook account, we collect your name, work email address, industry, role, and organization. This information is provided directly by you during onboarding.

1.2 Calendar Data (via Google Calendar API, Microsoft Graph API, or CalDAV). When you connect your calendar to Pinbook, we access the following data only:

• Free/busy status — whether a time slot is available or occupied
• Time slot duration — the start and end times of busy periods
• Your timezone — to accurately display availability across time zones

1.2.1 Timezone. Your timezone is read from your calendar provider's settings. You can modify it through your calendar account at any time.

1.3 Calendar Write Access. When you confirm a “pin” (scheduled meeting), Pinbook creates a new calendar event on the calendars of participating attendees. This write action is limited exclusively to creating the confirmed meeting event. Pinbook never modifies, deletes, or alters any existing calendar events.

1.4 Payment Information. Payment processing is handled entirely by Stripe, Inc. Pinbook never receives, processes, or stores your credit card number, bank account details, or other payment credentials. We receive only a confirmation of payment status from Stripe.

1.5 Usage Data. We collect anonymized usage analytics. We do not track meeting content, conversation logs, or attendee behavior.

1.6 Cookies. We use essential cookies required for authentication and session management. We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

We use the information we collect for the following purposes only:

• To provide the scheduling service
• To create calendar events for confirmed meetings
• To send meeting invitations, confirmations, and reminders via email
• To display account statistics and metrics
• To process payments through Stripe
• To communicate with you about your account and support
• To improve the Service based on aggregated, anonymized usage patterns

3. Google API Services — Limited Use Disclosure

Specifically:

• We only request the minimum scopes necessary: calendar.readonly (to read free/busy status) and calendar.events (to create confirmed meeting events)
• We do not use Google user data for serving advertisements
• We do not transfer Google user data to third parties except as necessary to provide the Service (e.g., sending calendar invites)
• We do not use Google user data for training machine learning or AI models
• We do not allow humans to read Google user data unless: (a) we have the user's affirmative consent, (b) it is necessary for security purposes, (c) it is necessary to comply with applicable law, or (d) the data is aggregated and anonymized for internal operations

4. Microsoft Graph API Disclosure

When you connect a Microsoft Outlook or Office 365 calendar, Pinbook accesses calendar data through the Microsoft Graph API subject to the Microsoft API Terms of Use.

5. How We Store Your Data

Pinbook uses industry-standard security measures. Data is encrypted in transit and at rest. Authentication uses OAuth 2.0 — Pinbook never asks for, receives, or stores your calendar password.

6. How We Share Your Data

We do not sell, rent, trade, or otherwise share your personal data with third parties for their marketing purposes. We will never sell your data. Period.

We share data only with:

• Stripe, Inc. — for payment processing only. Stripe's privacy policy: stripe.com/privacy
• Email service provider — to send meeting invitations, confirmations, and account communications
• Hosting and database providers — which process data on our behalf under data processing agreements

We may also disclose data if required by law, court order, or governmental regulation.

7. Data Retention and Deletion

• You may disconnect any calendar connection at any time. When disconnected, access credentials are deleted immediately
• You may delete your entire Pinbook account at any time. Account deletion cascades across all tables — your profile, calendar connections, pins, groups, and all associated data are permanently removed
• You may request a full export of your data in JSON format at any time
• After account deletion, we retain no personal data. Anonymized, aggregated analytics data (which cannot be linked back to you) may be retained

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (one-click in-app, or via email)
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing

To exercise any of these rights, contact us at privacy@pinbook.ai.

9. GDPR Compliance (European Economic Area)

If you are located in the EEA, we process your data under the following legal bases: (a) your consent when connecting your calendar, (b) the performance of a contract (providing the Service), and (c) our legitimate interest in improving the Service. You may withdraw consent at any time by disconnecting your calendar or deleting your account.

10. CCPA Compliance (California)

If you are a California resident, you have the right to: know what personal information we collect and how it is used, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell personal information.

11. Children's Privacy

Pinbook is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at privacy@pinbook.ai and we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes to how we use your data, we will notify you via email and/or a prominent notice within the Service before the change takes effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Pinbook, LLC
Email: privacy@pinbook.ai
Website: pinbook.ai