Privacy Policy

1. At a glance

• Pinman stores captured machine state and application data locally. Normal use does not upload that data to Parkerhill.
• We collect limited information when you choose to interact with our website, email list, beta program, support, purchasing, or licensing services.
• We do not sell or rent personal information, use it for cross-context behavioral advertising, or build advertising profiles.
• Tools and AI agents you connect to your installation may access data you authorize through the local API, MCP interface, CLI, or another supported interface. Parkerhill does not receive that data merely because you connected the tool.

2. Data stored by the software

Pinman is designed to inspect and capture selected machine state and application settings. Its projects, database, configuration, logs, and related content are stored on the machine running Pinman, normally under C:\ProgramData\Pinman. Parkerhill does not operate a cloud backend for this data, and normal use of the software does not transfer it to us.

Pinman makes locally managed data available through its web UI, CLI, REST API, MCP interface, and other supported interfaces. If you authorize another person, device, application, or AI agent to connect, that party may receive machine data available to its role and permissions. You are responsible for the services you connect and the access you grant. Their handling of data is governed by their own terms and privacy practices, not this policy.

The browser UI may store connection details on the device running the browser, including machine names and addresses, your selected role, a PIN, and a session token. This browser storage supports reconnection to your selected Pinman machines. It is not sent to Parkerhill through normal product use.

3. Local network access

Pinman serves its web UI and API over plain HTTP, by default on port 7466, for localhost and trusted private networks. Traffic over plain HTTP is not encrypted. Do not expose Pinman directly to the public internet. Use an HTTPS reverse proxy or VPN when the network is not trusted or when remote access is required. See Networking, HTTPS & IT for the supported security model and configuration options.

4. Information Parkerhill collects

We do not buy personal information about website visitors or include product telemetry that reports captured machine state or application configuration to Parkerhill.

5. How we use information

We use information described above to:

• confirm and deliver product-update subscriptions;
• evaluate beta applications and operate beta programs;
• process purchases, provide and recover licenses, and manage activations;
• respond to support requests and voluntary feedback;
• operate, secure, troubleshoot, and prevent abuse of our website and services;
• maintain business, tax, accounting, and transaction records;
• enforce applicable terms and protect our users, services, and legal rights; and
• comply with law and valid legal process.

We do not use personal information for decisions that produce legal or similarly significant effects through solely automated processing.

6. Legal bases where applicable

Where data-protection law requires a legal basis, we rely on:

• Consent for optional marketing email, which you may withdraw at any time.
• Contract and pre-contract steps to process a purchase, provide a license, manage an activation, or provide a service you request.
• Legitimate interests to operate and secure our services, prevent abuse, answer support requests, administer beta programs, and improve the product from voluntary feedback, balanced against your rights.
• Legal obligations for required tax, accounting, compliance, and legal records.

7. When we disclose information

We disclose personal information only as needed for the purposes described in this policy:

• Supabase hosts our contacts and subscription database.
• Resend sends subscription, beta, support, and transactional email and processes the content needed to deliver those messages.
• Vercel provides website hosting and related infrastructure.
• GitHub hosts release downloads, release information, and our public issue tracker, and may receive update-check requests.
• Our selected checkout, payment, and licensing provider processes purchases and license activations. We identify that provider and link to its terms or privacy notice at or before collection.
• Professional advisers and authorities may receive information when reasonably necessary to obtain advice, comply with law, respond to valid legal process, prevent harm or fraud, or protect legal rights.
• Information may be transferred as part of a merger, reorganization, financing, or sale of some or all of the Pinman business, subject to applicable law.

We do not sell or rent personal information or disclose it for cross-context behavioral advertising.

8. Cookies, browser storage, and tracking

We do not use advertising cookies, advertising pixels, or cross-site behavioral tracking. Our services and providers may use cookies or similar technologies that are necessary for security, session management, checkout, licensing, or other requested functionality. As described above, the locally served Pinman web UI uses browser storage to remember product and connection state on your device.

Because we do not sell personal information, use it for cross-context behavioral advertising, or track visitors across unrelated websites, browser "Do Not Track" and Global Privacy Control signals do not change our current practices.

9. Retention

We keep personal information only for as long as reasonably needed for the purposes described above, including:

• Pending subscription records are kept while confirmation remains useful and are deleted when no longer needed.
• Confirmed subscription information is kept until you unsubscribe or request deletion. After an unsubscribe request, we may retain the minimum information needed to honor the opt-out and prevent unwanted resubscription.
• Beta applications, support messages, and voluntary feedback are kept while the application, program, request, or related product work remains active and for a reasonable period afterward.
• Purchase, license, entitlement, and activation records are kept while needed to provide the license, support recovery and upgrades, resolve disputes, prevent fraud, and satisfy tax, accounting, and legal obligations.
• Security and request logs are kept for the shorter periods set by our operational needs and service providers. Residual copies may remain temporarily in backups until those backups age out.

Parkerhill does not control how long you retain the local database, configuration, logs, or browser storage created by your own Pinman installation.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information we control, including limiting access to people and providers who need it. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

You are responsible for protecting your Pinman machine, browser devices, PINs, session tokens, firewall, and network. In particular, local Pinman HTTP traffic is unencrypted unless you place an HTTPS proxy or VPN in front of it.

11. Your choices and privacy rights

You can unsubscribe at any time using the link in any marketing email or by contacting us. Unsubscribing stops future marketing email but does not prevent transactional messages relating to a purchase, license, security matter, or support request.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information, or to object to or restrict certain processing. You may also withdraw consent where processing is based on consent. We may need to verify your identity and may retain information when permitted or required by law. We will not discriminate against you for exercising an applicable privacy right.

These requests concern information held by Parkerhill. Data in your local Pinman installation remains under your control. If you are in the EEA, United Kingdom, or another jurisdiction that provides the right, you may also complain to your local data-protection authority.

12. International processing

Parkerhill is located in the United States. Our service providers may process information in the United States and other countries. Where required, we rely on recognized transfer mechanisms or other legally permitted safeguards for international transfers.

13. Children's privacy

Pinman and its website are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it as appropriate.

14. Changes to this policy

We may update this policy as the product, providers, or legal requirements change. We will post the revised policy here and update the date above. If a change materially affects how we use information already collected, we will provide additional notice or request consent when required.

15. Contact us

Questions or privacy requests may be sent to: