Pinlo is a location-sharing platform. We know that means trust. This policy explains exactly what data we collect, why, and what you can do about it.
Pinlo is operated by Novator Technologies, based in Karachi, Pakistan. We build tools that make deliveries more reliable by turning GPS pins into permanent, shareable address links.
When this policy says "Pinlo," "we," "us," or "our," it refers to Novator Technologies and the Pinlo platform at pinlo.pk.
We collect only the data needed to provide and improve the service. Here's a complete list:
| Data | When | Required? |
|---|---|---|
| Email address | Account registration | Yes |
| Password | Account registration | Yes (stored as irreversible hash) |
| GPS coordinates | When you create or adjust a pin | Yes (core functionality) |
| Phone number | Pin verification via SMS/WhatsApp | For verification only (encrypted at rest) |
| Username | When you claim a pin | Optional |
| Delivery notes | When you add notes to your pin | Optional |
| Business info | Business registration | For business accounts only |
| Access logs | When someone views your pin | Automatic (for your security) |
| IP address | On every request | Automatic (rate limiting, abuse prevention) |
What we don't collect: We don't collect your browsing history, contacts, photos, financial information, government IDs, or any data from other apps on your device. We don't use tracking pixels or third-party analytics.
Every piece of data we collect has a specific purpose. We don't collect data "just in case."
| Purpose | Data Used |
|---|---|
| Create your address link | GPS coordinates, username |
| Verify pin accuracy | Phone number (for SMS/WhatsApp verification) |
| Protect your account | Email, password hash, IP address |
| Show you who accessed your pin | Access logs (timestamp, source, type) |
| Prevent abuse | IP address, GPS accuracy readings, access patterns |
| Resolve addresses for delivery partners | GPS coordinates, delivery notes (only when you share your link) |
| Improve the service | Aggregated, anonymized usage statistics |
Your location data is shared only when you explicitly choose to share it — by giving someone your Pinlo link. We never sell, rent, or trade your data.
| Recipient | What They Get | When |
|---|---|---|
| Anyone you share your link with | GPS location, delivery notes, map view | When they open your link |
| Delivery/courier companies | GPS coordinates via API | Only when you enter your Pinlo link at checkout or a courier resolves it with your consent |
| E-commerce platforms | GPS coordinates via checkout widget | Only when you use Pinlo at checkout on their store |
We never: sell your location data to advertisers, share your data with data brokers, provide your information to government agencies without valid legal process, or let businesses access pins beyond their own customer base.
You control who can see your pin. Every pin has an access level that you can change anytime from your dashboard.
Anyone with your link can view your location and navigate to it. The link is not discoverable — you must share it.
Visitors must enter a one-time code sent to your phone before your location is revealed.
Only resolves via authenticated API calls. Cannot be opened in a browser. For enterprise and courier use only.
Temporarily or permanently hide your pin. The link will return "Pin unavailable" or 404.
You own your data. Here's what you can do with it at any time:
| Right | How |
|---|---|
| View your data | Your dashboard shows all your pins, access logs, and account information. |
| Correct your data | Edit your pin location, notes, or account info from your dashboard. |
| Delete your pin | Permanently delete any pin. All associated data — access logs, verification records — is hard-deleted within 30 days. |
| Delete your account | Contact us at [email protected]. We'll delete your account and all associated data within 30 days. |
| Export your data | Access logs can be exported before the 90-day auto-purge. Contact us for a full data export. |
| Block access | Block specific stores, couriers, or API keys from resolving your pin. |
| Transfer ownership | Transfer your pin to another Pinlo account (e.g., moving houses, selling a business). |
| Opt out of verification messages | Reply STOP to any SMS/WhatsApp message, or contact us to opt out. |
We don't keep data longer than necessary.
| Data | Retained | Then What |
|---|---|---|
| Pin data | Until you delete it | Hard-deleted within 30 days of your request |
| Access logs | 90 days | Auto-purged (you can export before purge) |
| Verification tokens | 7 days | Auto-expired and invalidated |
| Phone numbers | Only during verification | Encrypted at rest, purged with pin deletion |
| Account data | Until account deletion | Hard-deleted within 30 days |
| Expired pins (no use in 12 months) | Flagged, not deleted | Re-verified on next access or deleted by owner |
Pinlo uses minimal cookies — only what's needed for the service to work. We don't use third-party tracking cookies, advertising cookies, or analytics cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| Authentication token | Keeps you logged in | 7 days (stored in browser localStorage) |
That's it. One cookie. No cookie banner needed because we don't track you.
Pinlo is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.
If we make material changes to this policy, we'll notify you via email (if you have an account) or by placing a prominent notice on the website at least 14 days before the changes take effect.
Minor changes (clarifications, formatting, adding new data types with the same protections) may be made without notice. The "Last updated" date at the top of this page always reflects the most recent revision.
If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern:
| General inquiries | [email protected] |
| Security issues | [email protected] |
| Data deletion requests | [email protected] |
| Company | Novator Technologies, Karachi, Pakistan |