Legal

Privacy Policy

Last updated: April 2026

Pinpoint is operated from Poland and is subject to the General Data Protection Regulation (GDPR). This policy explains clearly what data we collect, why, and what your rights are. We do not sell your data. Ever.

1. Who We Are

Pinpoint is an independent UX and CRO audit service operated from Warsaw, Poland. We can be contacted at pinpoint.audits@gmail.com. For GDPR purposes, Pinpoint is the data controller for personal data collected through this website and our payment process.

2. What Data We Collect

We collect only the data necessary to deliver our service:

Email address — collected via Stripe checkout to deliver your audit report
Product URL — the website you submit for review
Context information — optional description of the problem you're experiencing
Payment information — handled entirely by Stripe. We never see or store your card details
Name — if provided during Stripe checkout

We do not use cookies, tracking pixels, or analytics tools on this website. We do not collect data from visitors who do not make a purchase.

3. How We Use Your Data

Your data is used exclusively to:

Deliver your audit report to your email address
Respond to follow-up questions related to your purchase
Process your payment via Stripe
Comply with legal and tax obligations

We do not use your data for marketing, profiling, or any purpose beyond service delivery. We will never contact you after your audit is delivered unless you initiate contact first.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

Contract performance — processing your email and submission data is necessary to deliver the audit you purchased
Legal obligation — we retain payment records to comply with tax and accounting laws

5. Data Sharing

We share your data only with the following third-party services necessary to operate:

Stripe — payment processing. Stripe is PCI-DSS compliant and GDPR-compliant. Stripe Privacy Policy →
Google (Gmail) — email delivery of your audit report. Google Privacy Policy →
Make.com (Integromat) — automation of audit delivery workflow. Data passes through Make.com servers temporarily. Make.com Privacy Policy →
Anthropic (Claude API) — your product URL and context are sent to the Claude API to generate your audit report. Anthropic does not use API inputs to train their models. Anthropic Privacy Policy →

We do not sell, rent, or share your data with any other parties.

6. Data Retention

Audit content — stored in our Make.com data store temporarily and deleted automatically after delivery
Email correspondence — retained in Gmail for up to 12 months
Payment records — retained for 5 years as required by Polish and EU tax law

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can request correction of inaccurate data
Right to erasure — you can request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations
Right to restriction — you can request we limit processing of your data
Right to data portability — you can request your data in a portable format
Right to object — you can object to processing based on legitimate interests

To exercise any of these rights, email pinpoint.audits@gmail.com. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data. All payment processing is handled by Stripe with industry-standard encryption. Email communications are transmitted via Google's secure infrastructure.

9. International Transfers

Some of our third-party processors (Stripe, Google, Anthropic, Make.com) may process data outside the European Economic Area (EEA). Where this occurs, we rely on Standard Contractual Clauses or other GDPR-approved transfer mechanisms.

10. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Polish data protection authority (UODO) at uodo.gov.pl.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with the date it was last updated.

12. Contact

For any privacy-related questions or requests: pinpoint.audits@gmail.com

This policy applies to all data collected through pinpointaudit.co and via Stripe payment links operated by Pinpoint.