Privacy Policy

1. The short version

• We collect what you give us to run your account and connect you with agents and businesses.
• Your details only go to an agent or business when you choose to contact them and tick the box to share.
• We don't sell your personal information, and we don't use it to target ads.
• We don't use advertising cookies. Analytics cookies are only set if you tap "Accept" in the cookie bar.
• You can ask to see, correct or delete your information at any time.

2. What we collect

• Account details: your name, username, email, password (stored encrypted, which we can't read) and whether you joined as a mover, agent or business.
• Agent and business profiles: photo, bio, phone, website, languages, areas served, and licence number, regulator, brokerage or business category. Once verified, the profile is public, except your email.
• Listings: addresses, prices, descriptions and photos agents post. These are public.
• Messages to agents and businesses: your name, email, optional phone, where you're moving from, your timeline and your message.
• Community posts: questions and answers you post are public, shown with your username.
• Saved homes, waitlist, city requests and contact messages: homes you save, your email if you join a waitlist, cities you ask us to add (see City requests), and what you send us through the Contact us page.
• Technical information: our hosting and database providers log basic request details such as IP address, browser type and time, for security and fixing problems. We also measure how the site is used (see Cookies and analytics).
• Kept only on your device: your move planner checklist and homes you swipe on are stored in your browser, not on our servers. Clearing your browser data removes them.

3. How we use it

• To run your account, show your profile and listings, and keep the site working and secure.
• To pass your message to the agent or business you chose, with your consent.
• To check agent licences and business details before profiles go public.
• To reply to you, and to send account emails such as sign-up confirmation and password resets.
• To send news or offers only if you've agreed to receive them. Every such email has a way to unsubscribe.
• To prevent spam, fraud and misuse, and to meet legal requirements.

4. Who we share it with

• Agents and businesses you contact. When you send a message and tick the consent box, that agent or business receives your details. They handle them under their own privacy obligations.
• Service providers who run the site for us and may only use your information to do that: Supabase (database, accounts and photo storage) and Vercel (website hosting and visitor counts) and PostHog (product analytics, in the United States). We'll add an email delivery provider here when we start using one.
• The public: verified profiles, listings and community posts are visible to anyone.
• Legal reasons: if the law requires it, or to protect people's safety or our rights.
• A new owner: if Pinned is sold or merged, your information would move with it under this policy.

We don't sell or rent personal information, and we don't share it for targeted advertising.

5. Travel partner links

Some "Try before you move" links go to travel partners such as Booking.com, Vrbo and GetYourGuide. When you click one, you leave Pinned and the partner's own privacy policy applies. The partner may set its own cookies to record that you came from Pinned, so we can earn a commission if you book. We don't share your name, email or account details with these partners. If you've allowed analytics, we record that a partner link was clicked, but not what you book.

6. City requests

If you use "Request a city", we store the city you typed, anything you add about why, and your email only if you give it. We use it to decide which places to add next and, if you asked, to email you when your city is added. Only Pinned admins can see these requests.

7. Where it's stored

Our database and photos are stored in Canada (Supabase's Canada Central region). The website is served by Vercel, which may process requests in the USA or other countries, and PostHog analytics data is processed in the USA. Information processed outside your province, state or country may be accessible to authorities there under local law.

8. How long we keep it

We keep your account information while your account is open. If you delete your account, we delete or anonymize your information within 90 days, except what we must keep for legal, security or fraud-prevention reasons. Messages you've already sent to agents stay with them. Contact messages are kept for up to 2 years.

9. Your choices and rights

Wherever you live, you can ask us to:

• show you the personal information we hold about you,
• correct anything that's wrong (you can also edit your profile yourself),
• delete your account and information,
• withdraw consent, for example to marketing emails.

Depending on where you live, such as Québec, other Canadian provinces, California and other US states, you may have further rights under local law, including to receive your information in a portable format. Send requests through Contact us and choose "Privacy request". We'll answer within 30 days, may need to confirm your identity first, and won't treat you differently for using your rights.

If you're not satisfied with our answer, you can contact the privacy regulator where you live, such as the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.

10. Keeping it safe

We use encrypted connections, encrypted passwords and database rules that limit who can see each piece of information. No system is perfectly secure. If a breach puts you at real risk, we'll tell you and the regulators as the law requires.

11. Children

Pinned isn't meant for anyone under 18, and we don't knowingly collect information from children. If you think a child has given us information, Contact us and we'll delete it.

12. Cookies and analytics

We use cookies to keep you logged in. We don't use advertising cookies. We also count visits with Vercel Web Analytics, which doesn't use cookies or identify you across sites; it records the page, referring site, country, and device and browser type.

Product analytics (PostHog). We use PostHog to understand how people use Pinned: which pages they visit, where they came from (for example a search engine, social media or an ad link), what they click, and where they get stuck. Before you choose, we only count anonymous page views kept in your browser's memory, with no cookies. If you tap "Accept" in the cookie bar, PostHog stores an anonymous ID in a cookie and local storage so we can recognise repeat visits, and we may record about 1 in 5 visits as a replay of clicks and scrolling. Anything you type into forms is hidden in replays. If you tap "Only essential", none of this is stored. You can change your choice by clearing this site's data in your browser. PostHog processes this data for us in the United States.

13. Changes to this policy

If we change how we handle personal information, we'll update this page and its date, and tell account holders about important changes before they take effect.

14. Contact our privacy team

Pinned is responsible for the personal information it holds and has someone accountable for privacy. Reach them through Contact us.