The people who sign up are trusting you. We take that seriously.
Here's exactly what Pin collects, who can see it, how long it stays and how it's protected.
We collect only what the event needs
A name and one way to reach someone, how many are coming, and whatever the organizer asks for. No account, no password, no tracking across sites.
Each organization is walled off
Every organization's data is separated inside the database itself, not just in our code. Automated tests try to read across organizations before every release, and they must fail.
Addresses stay private
Pickup addresses for rides are encrypted and visible only to the ride coordinator, the organization's owners and admins, and the driver they're matched with, if the rider agrees.
It's deleted when the event is over
Names and contact details are deleted automatically 90 days after the event by default. Organizers can choose a shorter or longer period. Head counts without names are kept.
No ads, no selling, no sharing
We don't sell personal information, use it for advertising or share it with other organizations. Analytics are counted without personal data.
Texts only when asked
Text reminders go only to people who checked the box, and replying STOP ends them. Phone numbers are never shared for marketing.
Organizer accounts are protected
Sign-in uses single-use email links that expire in 15 minutes. Owners can add two-step verification, and exports or permission changes ask you to sign in again.
Backed up and watched
Data is encrypted in transit and at rest, backed up daily, and we test restoring it. Errors and outages alert us right away.
Abuse is handled
Every event page has a way to report it. New organizations have lower limits until they're verified, and we can take down an event that breaks our terms.
Payments never touch Pin
Paid tickets are processed by Stripe and go straight to the organizer's own Stripe account. Pin never sees or stores card numbers.
Found a security problem? Email security@pin.events. We reply within two business days, and we won't take action against anyone who reports in good faith and doesn't access other people's data. To report an event, use the link on its page or email abuse@pin.events. Read the full privacy policy.