Privacy Policy

What a snapshot contains

A snapshot is a copy of the page as it appeared to you. If you were signed in, it includes whatever was on screen — which may be personal information about you or about other people. Freeze deliberately.

That means a snapshot of an inbox contains the messages that were visible, a snapshot of a customer record contains that customer’s details, and a snapshot of a page showing your own name and email contains those too. Pinafly cannot tell the difference between a page you meant to capture and one you did not — it copies what the browser could see.

We remove some things on the way through: session cookies and tokens found in the page are stripped, and no video or audio is ever captured. Everything else that was on screen is part of the copy.

What the extension captures

The extension captures a page only when you click the Pinafly icon on it. When you do, it serialises that single tab’s content — its HTML and images, which are downscaled and re-encoded — and sends it to your Pinafly account at pinafly.com to create a snapshot. It captures nothing unless you click, and only the tab you clicked (it uses Chrome’s activeTab permission, not standing access to all your sites).

Some pages load stylesheets and images from other servers that a browser will not let the extension read. Where that happens, our servers may fetch those files directly — the stylesheet or image only, without your cookies, session or any other credential — so the snapshot looks right. You can also grant the extension optional permission to fetch them itself; it asks only after a capture has actually lost something, and you can decline.

Screenshots

Alongside the copied page we may store an image of the visible tab at the moment you froze it, so you can see how the page looked to you. A screenshot is part of the snapshot: it is stored with it, has the same access rules, and is deleted when it is deleted.

Who can see a snapshot

Snapshots are shared by capability link. Anyone holding the link can open the snapshot, subject to two settings you control: who the link reaches (only invited people, only people signed in, or anyone with the link) and what they can do (view, comment, or add pins). Change the settings and the link’s reach changes with it.

We never publish snapshots to the open web. There is no public directory, no way to make a snapshot discoverable, and every snapshot is served with instructions not to be indexed by search engines — on every plan and every setting.

Account information

To link the extension to your account, we store a Pinafly capture token locally in your browser. Signing in uses your email address; if you sign in with Google, we receive your email, name, and profile picture to create your account. We do not read any other Google data.

How we use your data

We use captured pages and account data solely to provide Pinafly’s snapshot and feedback features — storing your snapshots, showing your pins, and delivering feedback to your inbox. We do not sell your data, use it for advertising, or use it to determine creditworthiness or for lending.

Analytics

We measure how the product is used so we can improve it. Usage events are recorded on our own servers without advertising cookies, and IP addresses are masked. We also use Google Analytics for site usage. Capability tokens are redacted before any analytics service sees them — a share link in a page address is replaced before it is reported, so a snapshot’s link is never handed to an analytics provider.

Emails we send you contain links tagged so we can see which messages are useful. We record that a message was sent; we do not use tracking pixels to record whether you opened it.

Who else processes your data

We use a small number of providers to run the Service. They process data on our instructions only:

• DigitalOcean — hosting and snapshot storage.
• Resend — sending email.
• Stripe — payments. We never see or store your card details.
• Google Analytics — site usage measurement.

Some of these providers store data outside Australia, including in the United States.

Other people’s personal information

If you capture a page containing someone else’s personal information, you decide what is collected and why — you are the controller of that information, and we process it on your behalf. Our Terms of Service require you to have the right to capture it. If someone asks us about personal information inside a snapshot one of our customers created, we will normally refer them to that customer, and we may remove the snapshot.

Retention & deletion

We delete captured pages on a schedule, and deletion is permanent. How long a page lasts is decided by the plan you were on when you captured it, not the plan you are on now:

• Captured on the free plan: visible for 30 days, then hidden, then deleted 60 days after capture.
• Captured on a paid plan: kept for as long as you subscribe. If your subscription ends, those pages are deleted 180 days after it ends. Subscribing again before then stops the clock.

We email you 7 days and 2 days before anything is deleted, telling you how many pages and comments are affected. Deleting a page also deletes its pins, comments and screenshot. Deleted pages cannot be recovered, by you or by us, and subscribing later does not bring back anything already deleted.

You can delete any page yourself at any time from your Pinafly account. Removing the extension deletes the capture token stored in your browser. If you close your account we delete your content after a reasonable period, except where we must keep records — billing records, for example — to meet a legal obligation.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Email us and we will respond within a reasonable time. If you are not satisfied with how we handle a privacy matter, you can complain to the Office of the Australian Information Commissioner.

Contact

Questions about this policy or your data? Email privacy@pinafly.com.