Privacy Policy

Effective Date: March 31, 2026

Pinyon, Inc. (“we,” “us,” or “our”) operates the website getpinyon.io (the “Site”). This Privacy Policy describes how we collect, use, and protect information when you visit our Site. It does not apply to the Pinyon platform or any services we may offer to business customers, which will be governed by separate agreements and privacy terms.

1. Information We Collect

Information You Provide

When you contact us via email or through the contact form accessible on the Site, we may collect the information you choose to share, such as your name, email address, company name, role, and other answers collected via the form.

We do not currently operate account registration or a demo request system on the Site. If we add such features in the future, we will update this policy.

Information Collected Automatically

We use Google Analytics to understand how visitors interact with the Site. Google Analytics uses cookies and similar technologies to collect:

Pages visited and time spent on those pages
Referring URLs (how you arrived at the Site)
General geographic location (country or city level, derived from IP address)
Browser type, device type, and operating system
Date and time of visits

Google Analytics does not provide us with your name, email address, or other directly identifying information. Google’s use of this data is governed by Google’s Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

2. Cookies

Our Site uses cookies set by Google Analytics to distinguish visitors and understand usage patterns. These are:

_ga — Used to distinguish users. Expires after 2 years.
ga[ID] — Used to maintain session state. Expires after 2 years.

We do not use cookies for advertising, retargeting, or profiling. You can block or delete cookies through your browser settings. If you disable cookies, the Site will continue to function normally; we will simply not collect analytics data from your visit.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to inquiries. When you contact us, we use your name and email address to reply to your message.
To understand Site usage. We use analytics data to understand how visitors find and use the Site, so we can improve its content and usability.
To comply with legal obligations. We may process information as required by applicable law.

We do not use your information for automated decision-making or profiling. We do not send marketing communications unless you specifically request them, and you can opt out at any time by contacting us.

4. Legal Basis for Processing

If you are located in the European Economic Area, United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:

Legitimate interest for analytics data collection (understanding Site usage and improving the Site), balanced against your privacy rights. You can opt out at any time using the methods described above.
Consent for any cookies set by Google Analytics, which you can withdraw by adjusting your browser settings.
Legitimate interest or contract performance for responding to your inquiries (providing the information you requested).

We do not sell, rent, or trade your personal information.

We share information only with the following categories of recipients:

Hosting provider. Our Site is hosted on Amazon Web Services (AWS), which processes data as part of providing infrastructure services.
Analytics provider. Google Analytics processes usage data on our behalf, as described above.
Legal authorities. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, safety, or property.

6. International Data Transfers

Our Site is hosted in the United States (AWS US-East-1). If you visit the Site from outside the United States, your information will be transferred to and processed in the United States. We rely on the safeguards provided by our service providers, including AWS’s compliance with the EU-US Data Privacy Framework and Standard Contractual Clauses, to protect information transferred internationally.

7. Data Retention

We retain contact information (such as emails you send us) for as long as reasonably necessary to respond to your inquiry and maintain our business relationship, and we delete it upon your request.

Google Analytics data is retained for 14 months, after which it is automatically deleted from Google’s systems.

8. Data Security

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and the security measures provided by our hosting and analytics providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

If You Are in the EEA or United Kingdom

Under the General Data Protection Regulation (GDPR) and UK GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, restrict or object to certain processing, request data portability, and lodge a complaint with your local data protection authority.

If You Are in California

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect and how we use it, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information.

All Visitors

Regardless of your location, you may contact us at any time to request access to, correction of, or deletion of the information we hold about you, or to opt out of analytics tracking. We will respond within a reasonable timeframe and in accordance with applicable law.

10. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any site you visit.

11. Children’s Privacy

Our Site is not directed to children. We do not knowingly collect personal information from anyone under 13 years of age (or such higher age of minors as applicable under local law). If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated effective date. If we make material changes, we will provide notice through the Site.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:

Pinyon, Inc. Email: info@getpinyon.io