This is a plain-language draft written before launch. It describes how the service actually works today and has not yet been reviewed by a lawyer.
Who we are
pinwise is run by pinwise (Imiel Visser). When this page says "we", it means that. You can reach us throughimiel.dev.
What we collect
- Your GitHub profile when you sign in with GitHub: id, login, avatar and the primary email GitHub shares.
- Your email account when you sign in with email: the Clerk user id, verified primary email, username and avatar.
- Dependency files from repos you connect or scan: manifests and lockfiles. Never source code.
- Scan results and tickets we generate from those files, and the notes and evidence your agents submit.
- Billing details are handled by Stripe. We store a customer id, not your card.
- Basic request logs (IP, time, path) for rate limiting and abuse prevention.
Why
To run the service you asked for: scan, generate tickets, verify closures and send the digests you opted into. We do not sell data and we do not use your data to train models.
How long we keep it
- Raw scan files: 90 days, then deleted.
- Public scan reports: 90 days after the last scan.
- Account, tickets and history: until you delete the workspace, then within 30 days.
Who else processes it
- Cloudflare (hosting, storage, email).
- GitHub (sign-in and repo access you grant).
- Clerk (email sign-in).
- Anthropic (research on public package changelogs; your repo files are not sent).
- Stripe (payments).
Your rights
You can export or delete your data at any time, or ask us to. If you are in the EU or UK you have the rights of the GDPR, including access, correction, deletion and complaint to your data protection authority.
Cookies
One signed session cookie after sign-in. No advertising or cross-site tracking cookies.