Privacy policy

When visiting the Website, you may provide us with personal information — such as your name, workspace name, email and a password — to create a free trial of the Service.

Information uploaded during use of the Service may include the name, email and avatar of yourself, your team members, or your guest reviewers. This information is visible to people you grant access to your canvases (account owner, members, and guests with a valid link). You are responsible for the data that you and the users you authorize upload to the Service, and for the compliance of that data with applicable law — including data protection regulations.

If you subscribe to a paid plan, we will ask for billing and account information to process your order. Payments are handled over a secure connection by a PCI-compliant processor. We never store full card numbers — only the last 4 digits, kept for billing reconciliation. Card data is used solely to process payments.

We rely on a small number of sub-processors to run the Service: cloud hosting, email delivery, product analytics, and help-desk software. Each sub-processor is bound by a GDPR-compliant data processing agreement.

Pensynk does not sell, trade or rent your personal information. We will not disclose it to third parties without your express permission, except as described in this Privacy Policy. We do not supplement what you give us with data acquired from elsewhere.

When you give us your email address, we may use it to reply to a message you sent, to share product updates, important changes to our terms or policies, or content we believe is relevant to your use of the Service. You can unsubscribe at any time.

We support AES 256-bit encryption at rest and TLS 1.2+ in transit. Passwords are one-way hashed and never stored in clear text.

Our Website and the Service are hosted on AWS, with primary regions in the European Union.

The European Union's General Data Protection Regulation (GDPR) grants you a set of rights over your personal data. They include:

Right to object and right to rectification — all your personal data can be viewed and edited from your account settings or via our API. You can also unsubscribe from marketing emails using the link at the bottom of each message. If you are unsure what we have stored about you, email contact@pensynk.com and we will clarify or correct it.

Right to erasure — the account owner can delete the workspace from settings at any time. All content is permanently removed from our servers within 30 days. Individual members and canvases can be deleted at any time from inside the app or via the API.

Prompt breach notification — you will be notified promptly of any breach involving your personal data, in line with GDPR Article 34.

You also have the right to lodge a complaint with the competent Supervisory Authority. A list of authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you need further assistance regarding your rights, contact us using the information below. Where our ability to uphold these rights is limited by security, fraud prevention, or legal obligations, we will explain the specifics in our response to your request.

Questions about this Privacy Policy? Email us at contact@pensynk.com.