Privacy Policy

The short version

• PinDeck helps you leave feedback on websites and manage it with your team.
• We collect only what we need to make that work: your account details, the feedback you send, and basic payment status.
• The browser extension does nothing on a page until you click its icon.
• We never sell your data and we don't use it for ads.
• You can ask us to delete your data at any time.

Who we are

PinDeck is run by Mohd Mukhlis Ismail. This policy covers the PinDeck website, our payment pages and the PinDeck Chrome extension. Questions? Email us at [email protected].

What we collect, and why

Your account

• Your name, email address and phone number, and a password (stored scrambled, so even we can't read it).
• We use this to sign you in and show your teammates who you are.

Your projects and team

• Organization and project names, each project's website address, who is on the team and their role, and invitations you send (we keep the invited person's email).
• We use this to run your boards and let the right people in.

The feedback you send

• What you type (title, description, comments), any files you attach, and the task's priority and status.
• The page address and title, and the exact spot and element you pinned.
• A screenshot of the part of the page you're pointing at, plus your screen size and browser type, so developers can see what you saw.
• We use this only to create the feedback and show it to your team.

Payments

• If you buy a paid plan, our payment partners (Stripe for cards, Billplz for Malaysian online banking) handle your payment details.
• We only get the result: which plan, how much, the dates, and a payment reference. We never see or store your full card number or bank login.

Basic technical data

• Standard server records such as your IP address and the time of each request, and cookies that keep you signed in.
• We use this to keep the service secure and working.

The PinDeck Chrome extension

• It only works when you ask. You click the PinDeck icon on a page; only then does the feedback widget appear on that tab.
• It doesn't track your browsing. It doesn't record the sites you visit and doesn't run quietly on other sites.
• It sends data only when you press submit: your feedback text, the page address, the pinned spot, and the screenshot. Nothing is sent before that.
• It remembers you are signed in by saving a sign-in token in your browser's extension storage. It's removed when you sign out or uninstall.
• Why it asks for its permissions: "activeTab" and "scripting" let it show the widget and take the screenshot on the one tab you clicked; "storage" keeps you signed in. It asks for nothing more, and it doesn't load code from the internet.

Chrome Web Store commitment. PinDeck's use and transfer of information received from the extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In plain terms:

• We use extension data only to provide the feedback feature you can see in the extension.
• We don't sell it, and we don't use or share it for advertising.
• We don't use it to judge your creditworthiness or for lending.
• We share it only with the services that help us run PinDeck (listed below), when the law requires it, or if the business is sold (we'd tell you first).
• Our staff don't read your feedback or screenshots unless you ask for support, we need to investigate abuse or a security problem, the law requires it, or the data is anonymous and combined with others'.

Who can see your data

People on your project can see its feedback, screenshots and comments, based on their role (for example, owner, developer or client). Nobody outside your project can.

Companies that help us run PinDeck

We use these providers, each only for the job described:

• Supabase — database, sign-in and file storage.
• Stripe and Billplz — payments.
• Resend — sending emails such as invitations and sign-in or reset links.
• AWS — hosting the website.

They may process data in other countries. We don't let them use it for their own purposes.

How we protect your data

• Everything travels over encrypted (HTTPS) connections.
• Database rules make sure people only see the projects they belong to.
• Screenshots and attachments are kept in private storage and opened with links that expire quickly.

How long we keep it

We keep your data while your account is active. If you delete a project, an organization or your account, we delete the related data within [30] days. We may keep payment records for up to [7] years where the law requires it. Backups clear out within [30] days.

Your choices

• Update your name and details in your profile.
• Email [email protected] to get a copy of your data, correct it, or have it deleted.
• Sign out or uninstall the extension to remove its saved sign-in.
• You can turn push notifications on or off on each device in your profile.

We reply within 30 days. Your rights under Malaysian law (PDPA 2010) and, where it applies, the GDPR also apply.

Children

PinDeck isn't meant for children under 16, and we don't knowingly collect their data. If you think a child has given us information, tell us and we'll delete it.

Changes to this policy

If we make important changes, we'll update the date above and let account holders know by email or in the app.

Contact us

Mohd Mukhlis Ismail — [email protected]