Privacy Policy

Controller

Mariano Fco. Jiménez Portugués, Spanish tax ID 50969630C, with address at Calle del Río Guadiana Nº2. Contact: gestion@pintopp.com.

Data we process

• Account and profile: email, username, name and bio when provided.
• Authentication and security: sessions, temporary magic links/tokens, technical identifiers, IP where needed for security/abuse prevention, and temporary security evidence.
• Content: photos, captions, Emotion Tags, reports and moderation decisions.
• Contact: email address and message when you use the form or contact us to ask a question, exercise rights or make a complaint.
• Location: precise GPS during Capture only where needed to verify publication; the published PIN uses a less precise public location.
• Payments: if promotion is enabled, payment identifiers, amounts, taxes and statuses needed for reconciliation, refunds and disputes. Pintopp avoids storing full card details.

Purposes and legal bases

• Providing accounts, publication and requested features: performance of a contract where processing is objectively necessary.
• Compliance with legal obligations applicable to content, consumers, tax or authorities: legal obligation.
• Security, abuse prevention, defence of claims and certain moderation tasks: legitimate interests subject to necessity and balancing.
• Handling enquiries, rights requests or complaints: legal obligation where applicable and, otherwise, legitimate interests or pre-contractual steps depending on the nature of the request.
• Consent: only for processing that is genuinely optional and revocable; it is not used as the universal basis for the service.

Providers

Pintopp uses specialist providers for infrastructure and specific functions. V1 architecture includes S3-compatible/Cloudflare R2 storage, Brevo transactional email, OpenAI moderation and Mapbox maps. Stripe is used only when Live payments are enabled and Sentry when technical observability is enabled.

Processors and subprocessors are reviewed contractually and data sent to them is minimised. By default, photos, captions, precise GPS, tokens and secrets are not sent to product analytics.

International transfers

Some providers may process data outside the EEA. Where this occurs, Pintopp will use the applicable transfer mechanism, such as an adequacy decision, the Data Privacy Framework where applicable, or Standard Contractual Clauses, and will maintain an internal provider inventory.

You can request information about the applicable safeguards and, where relevant, how to obtain a copy by writing to gestion@pintopp.com.

Required data and consequences

An email address is required to use magic-link access and maintain an account. To publish a PIN, you must provide the data and permissions needed to prepare, verify and moderate that publication; if you do not provide them, that feature cannot be completed. Profile fields identified as optional are not required to use the service.

Automated moderation

The photo and caption may be analysed automatically before publication to check whether the content can proceed. The result may allow publication or ask you to edit the text or retake the photo. This moderation is not used for advertising or commercial profiling.

Retention

• Cancelled draft: deleted immediately, except for a strictly necessary technical reference needed to complete a pending deletion.
• Abandoned draft: up to 30 minutes, except where economic recovery is pending.
• Magic link: valid for 30 minutes; consumed tokens are removed and unused expired tokens are periodically purged.
• Ordinary security evidence: up to 60 days, except for specific preservation required by an incident, claim or legal request.
• Published content: while published or until removed/deleted, subject to legally necessary retention.
• Contact enquiries: for as long as needed to reply and, where relevant, handle claims or legal obligations.
• Economic/tax records: for the applicable statutory period where payments exist.

Cookies and similar technologies

V1 uses cookies or storage that are strictly necessary for sessions, authentication and requested functionality. No consent banner is shown while non-essential cookies or techniques are not used. If non-essential tracking, autocapture, replay, persistent identification or equivalent techniques are enabled later, this policy will be reviewed and prior consent requested where required.

Rights

You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to gestion@pintopp.com. Requests are handled without undue delay and within applicable statutory deadlines. You may also complain to the competent data-protection authority.

Children

Pintopp V1 reserves accounts, publication, persistent interaction and promotion/payment to people aged 18 or over. Public browsing may remain accessible without an account.