Privacy Policy

Effective: May 6, 2026

1. What We Collect

• Account data: email address, hashed password
• Session metadata: session codes, timestamps, device names, host operating system/version, viewer counts, and limited connection status
• Billing and verification data: managed by our payment processor - we do not store card numbers. We store payment processor IDs, plan, amount, billing period, processor, payment/dispute status, mobile verification status, phone last four digits, hashed phone evidence, checkout IP address, and billing OTP events needed for receipts, support, fraud prevention, account security, and dispute evidence.
• Usage data: session count, plan usage, checkout IP address, request IP address, browser/user-agent, and device metadata needed for security, fraud prevention, support, and payment-dispute evidence
• Trial abuse-prevention data: trial request IP address, browser/user-agent hash, human-verification result metadata, abuse-score events, and temporary trial grant records used to prevent repeated unpaid trial loops
• Caption and replay content, when enabled: final caption text, viewer microphone audio chunks, timing metadata, storage object IDs, and replay metadata needed to let the host replay a captioned session
• Communications: billing/support emails or messages you send to us, plus transactional email/SMS records such as account verification, mobile OTP, receipt, subscription, refund, or dispute-related communications when available
• Diagnostic logs: session events (connect, disconnect, errors) are automatically synced to our servers for troubleshooting, fraud prevention, support, reliability analysis, and payment-dispute evidence. Logs contain session codes, timestamps, and technical diagnostics. No screen content, audio, clipboard content, or input content is included. Synced diagnostic logs are retained for up to 180 days.

2. What We Do NOT Collect

• Screen content - transmitted directly when possible and relayed only as encrypted transport when direct connection is not available; we do not store the content
• Live audio by default - transmitted directly when possible and relayed only as encrypted transport when direct connection is not available; we do not store live audio unless the host enables caption/replay storage
• Keyboard and mouse input content - transmitted for the live session and not stored on our servers
• Clipboard content - transmitted for the live session and not stored on our servers

3. How We Use Your Data

Account and session data is used solely to operate the Service - authentication, mobile verification, session management, billing, support, fraud prevention, and billing-dispute evidence. Caption and replay content, when enabled by the host from the terminal or host controls/CC button, is used to provide session replay and caption history to the host account, support troubleshooting, and enforce retention/deletion controls.

References to Pinky being invisible, mostly invisible, low-profile, or running in the background describe best-effort product behavior. They do not mean Pinky avoids operating-system, browser, security, network, payment, diagnostic, or legal records. We may still process the metadata and logs described in this policy to operate, secure, support, bill for, and improve the Service.

4. Data Storage

Account data is stored on our servers. All connections to our servers use TLS encryption. Passwords are hashed with bcrypt. Diagnostic logs are pruned after 180 days. Optional caption/replay content is stored in private object storage. Starter caption/replay content may be retained for up to 6 months and remains locked unless the account upgrades to Pro or Team; Pro caption/replay content is retained for up to 6 months; Team caption/replay content is retained for up to one year; shorter operational retention settings may apply. Billing, payment, dispute, receipt, and tax/accounting records may be retained longer where needed for fraud prevention, dispute handling, accounting, legal compliance, or legitimate business records.

5. Third Parties

• Stripe or Square: payment processing, depending on the billing provider shown at checkout or in your dashboard
• DigitalOcean: server hosting
• Cloudflare: Turnstile human verification for Try Us and R2 private object storage for optional caption/replay content when enabled

We do not sell your data. We share data with service providers only as needed to operate, secure, support, bill for, and improve the Service.

6. Data Deletion

You can delete your account at any time from the dashboard. Before the local account is removed, Pinky attempts to cancel any live subscription tied to that account so future billing does not continue under the deleted account. This removes your Pinky account data, device/session records, stored caption/replay indexes and objects under Pinky's control, and local billing history. Payment processor records may remain with Stripe, Square, or another processor under that processor's own retention requirements. Legal acceptance records showing signup, checkout, or caption/replay acknowledgement may be retained for 18 months after account deletion for dispute defense, consent evidence, fraud prevention, and legal compliance. Some backup, fraud-prevention, dispute, accounting, or legal-compliance records may remain for the period reasonably required for those purposes.

7. Cookies

We use secure cookies and CSRF protection for account sessions. Browser storage is used for non-sensitive local preferences such as viewer display and audio settings. We do not use analytics or tracking cookies. Try Us may load Cloudflare Turnstile solely for human verification and abuse prevention. Mobile OTP messages may be sent through an SMS provider solely for account/payment verification and dispute-prevention evidence.

8. Contact

Questions? Reach us at hello@pinky.sh