Pindrops — Privacy Policy

Last Updated: June 6, 2026

This Privacy Policy describes how Pindrops LLC ("Pindrops," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website at pindrops.com, our web and mobile applications, and our related software and services (collectively, the "Services").

If you do not agree with this Policy, please do not use the Services.

Important: Who Controls Your Information

Pindrops provides a software platform that trade and field-service companies (our "Customers") use to run inspections and field service. How we handle information depends on whose information it is:

• When we act as a controller. For information about our Customers and the people who sign up for and use the Services on a Customer's behalf — such as company administrators, technicians, sales users, and website visitors — Pindrops decides how that information is used, and this Policy applies directly.

• When we act as a processor on a Customer's behalf. Our Customers use the Services to store and manage information about their own clients, properties, and the people connected to those properties (for example, property managers and on-site contacts). For that information, the Customer is the controller and Pindrops is a processor that handles the information under the Customer's instructions and the agreement between us and that Customer. If you are one of a Customer's clients or contacts and you want to access, correct, or delete information held in the Services, please contact the Customer directly. We will reasonably assist our Customers in responding to such requests.

1. Information We Collect

1.1 Information you provide to us. Depending on how you use the Services, we may collect:

• Account and contact information — name, email address, phone number, mailing address, company name, and job title or role.
• Login credentials — username and password (passwords are stored in hashed form).
• Content you submit — inspection records, reports, proposals, photos and documents you upload, property and customer records, deficiencies, notes, and signatures.
• Billing information — billing contact and address. Payment-card details are collected and processed by our third-party payment processor (Stripe); we do not store full card numbers.
• Communications — information you provide when you contact us for support or otherwise correspond with us.

1.2 Information collected automatically. When you use the Services, we and our service providers may automatically collect:

• Device and usage data — IP address, browser type, operating system, device identifiers, referring/exit pages, pages and features viewed, dates and times of access, and error logs.
• Location data — approximate location derived from IP address, and, where you enable it, device location used for field-service features such as mapping properties and recording where inspections are performed. You can disable device location through your device settings, though some features may not work as a result.
• Cookies — small first-party data files used to keep you signed in, remember preferences, and secure the Services. See Section 4.

1.3 Information from other sources. We may receive information from our Customers (for example, when a Customer sets up an account for one of its technicians) and from service providers that help us operate the Services.

We do not intentionally collect sensitive personal information (such as government ID numbers, health, or biometric data) through the Services, and you should not submit it.

2. How We Use Information

We use information to:

• create and administer accounts and authenticate users;
• provide, operate, maintain, secure, and improve the Services;
• process payments and manage subscriptions;
• enable features you use, including mapping, scheduling, reporting, and accounting integrations;
• respond to support requests and communicate with you about the Services, including service and administrative messages;
• send you product updates and, where permitted, marketing communications (which you can opt out of);
• monitor, prevent, and investigate fraud, security incidents, and misuse;
• create de-identified or aggregated data that does not identify any individual; and
• comply with law and enforce our agreements.

We do not use the content you upload in identifiable form to train artificial-intelligence or machine-learning models. Some features use trusted third-party AI providers (currently Anthropic) to process your data and return results to you; those providers do not use your data to train their own models. We may use de-identified and aggregated data to develop and improve the Services, including AI features. If we later wish to use your identifiable data to train AI models, we will ask your permission first.

We process information as needed to provide and improve the Services, to run our business, to comply with applicable law, and with your consent where required. The Services are intended for businesses located in the United States.

3. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may disclose information:

• To our Customers — for information we process on a Customer's behalf, and information about that Customer's own users (for example, a technician's activity and location made available to that technician's employer).
• To service providers — vendors who perform services for us, such as cloud hosting and storage, payment processing, email delivery, mapping, accounting integrations, AI assistant features, and customer support. The current core providers include Supabase (database and file storage), Vercel (hosting), Stripe (payments), Resend (email delivery), Google Maps (mapping), Anthropic (which powers the in-app AI assistant), and Intuit QuickBooks (accounting sync, when enabled by a Customer).
• For legal reasons — to comply with law or lawful requests, to enforce our agreements, or to protect the rights, property, or safety of Pindrops, our users, or others.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets.
• With your consent or at your direction.

QuickBooks (Intuit) accounting integration. If a Customer connects their QuickBooks Online account (an optional feature), Pindrops exchanges accounting data with that Customer's own QuickBooks company on the Customer's behalf. When invoices are finalized, Pindrops sends the related customer and property information (names, email addresses, phone numbers, and mailing addresses) and invoice details (line-item descriptions, quantities, prices, amounts, invoice numbers, and dates) to QuickBooks to create matching customer and invoice records. In return, Pindrops receives QuickBooks record identifiers and payment information (invoice totals and balances, payment amounts, and payment status) to keep invoice status up to date. Pindrops requests only QuickBooks' accounting permission and does not access bank-account numbers, payment-card numbers, or similar payment credentials through this integration. The connection uses Intuit's secure OAuth authorization; the access tokens are encrypted at rest and can be revoked at any time by disconnecting QuickBooks. Your use of QuickBooks is also governed by Intuit's own terms and privacy policy.

4. Cookies

We use only the essential, first-party cookies needed to operate and secure the Services — primarily to keep you signed in and maintain your session. We do not use advertising cookies, tracking pixels, or third-party analytics services, and we do not track you across other websites.

The one third party that runs in your browser is Google Maps, which we use to display property addresses and mapping features. Google Maps may set its own cookies as part of providing that functionality; it is used as a service provider for mapping, not for advertising.

Most browsers let you remove or reject cookies through their settings; if you do, some features (such as staying signed in) may not work properly.

Because there is no consistent industry standard for "Do Not Track" signals, we do not currently respond to them.

5. How We Protect Information

We use technical and organizational measures designed to protect information, including encryption in transit, access controls, and tenant isolation enforced at the database level. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6. Data Retention

We retain information for as long as needed to provide the Services and for legitimate business or legal purposes (such as tax, accounting, and recordkeeping). When information is no longer needed, we delete or de-identify it, except for copies that remain in routine backups until those backups are overwritten on their normal schedule. Information we process on a Customer's behalf is retained and deleted in accordance with our agreement with that Customer.

7. International Users

The Services are operated from, and information is stored in, the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your location.

8. Your Rights and Choices

8.1 Marketing. You can opt out of marketing emails by using the unsubscribe link in those emails. We may still send you service and administrative messages.

8.2 Account information. You can review and update your account information by signing in. To close your account, contact us (see Section 11) or your Company's administrator.

8.3 U.S. state privacy rights. Depending on where you live (for example, California and other states with comprehensive privacy laws), you may have the right to request access to, correction of, or deletion of your personal information, to receive a copy of it, and to opt out of certain processing. Because we do not sell personal information or use it for cross-context behavioral advertising, those particular opt-out rights do not apply to most of our processing. To make a request, contact us using Section 11. We will verify your identity before responding and will not discriminate against you for exercising your rights. You may designate an authorized agent to make a request on your behalf with proper authorization.

8.4 If you are a Customer's client or contact. If your information is in the Services because one of our Customers put it there, please direct your privacy requests to that Customer, who controls the information. We will assist the Customer as needed.

9. Children's Privacy

The Services are intended for business use and are not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take reasonable steps to delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, if the changes are material, provide additional notice as required by law. Your continued use of the Services after the update takes effect means you accept the revised Policy.

11. Contact Us

If you have questions about this Policy or want to exercise a privacy right, contact us at:

Pindrops LLC 1701 W. Wetherbee Rd. #770847 Orlando, FL 32837 privacy@pindrops.com