1. Two kinds of data
| Data type | Examples | Primary controls |
|---|---|---|
| Customer account data | Account identity, company profile, qualifications, watches, tracked matches, notes, alerts, reports, and preferences. | View or edit in the product; export or request account closure; submit a privacy request. |
| Public opportunity data | Issuer, project title, location, dates, published value, prerequisites, source URL, and source-health history. | Review the official source; submit an evidence-backed correction; source provenance is preserved. |
Customer account closure applies to customer-controlled data. It does not normally delete a public project record merely because that project was watched, saved, or discussed or tracked by a customer.
2. Public-source collection
PinPointe collects bounded factual information only from selected public sources whose access method and use conditions have been reviewed. Records retain a source URL and source identity. PinPointe does not automate bid submission, log into a procurement account on a customer's behalf, bypass access controls, or treat search engine snippets as an authoritative solicitation.
Source health, refresh time, and conservative status rules help expose uncertainty. When a source cannot refresh, last-good data may remain visible with a warning rather than being silently presented as current. The official source and its addenda always control.
3. Map tile delivery
When you open the interactive project map, your browser requests map tiles directly from the configured map-tile provider. Production deployments may use Stadia Maps, which receives your IP address and ordinary web-request metadata such as browser information and the tile URLs requested under its terms and privacy policies. Local and unconfigured deployments use OpenStreetMap's standard tile service; those requests are covered by the OpenStreetMap Foundation's privacy policy. The text-based opportunity list remains available if you prefer not to load the map.
4. Customer controls
- Edit company identity, service area, trades, qualifications, preferences, capacity, and exclusion filters from Company Profile.
- Track matches and update alert channels or frequency from your activity workspace.
- Manage passwords and revoke other signed-in devices from Account.
- Download the available account export from Account before closure.
- Request account closure from Account and complete the required confirmation.
- Manage a paid subscription separately through Stripe's Customer Portal.
5. Account export
An account export is intended to provide the main customer-controlled records in a portable form you can keep and use elsewhere. It may include account and company-profile data, qualification records, preferences, watches, alerts, and bid-workspace information. It does not include password hashes, bearer or CSRF tokens, internal security signals, another customer's information, provider secrets, or material that cannot lawfully be disclosed.
Store exports securely. They can contain commercially sensitive company information. An export is a snapshot and does not continue updating after download.
6. Account closure and deletion
Account closure requires recent authentication and a deliberate confirmation. Once completed, active sessions are revoked and the account can no longer be used. The operator deletes or de-identifies customer data within a reasonable operational period, subject to limited retention for payment, tax, fraud prevention, security, disputes, legal obligations, and backup cycling.
Some records may be retained in a restricted form when necessary to document consent, honor an unsubscribe, demonstrate a transaction, prevent abuse, or establish or defend legal claims. De-identified aggregate information that cannot reasonably be linked back to the account may also remain. Closing an account cannot retract an email already delivered or remove data from a third-party system you separately used.
7. Correction and disputes
Correct customer-controlled information in the relevant product page or submit a privacy request. For project information, provide the PinPointe project URL, exact field, official source, proposed correction, and evidence through Support & Corrections. A disputed value may be marked uncertain while it is reviewed.
8. Provider boundaries
Service providers receive only the information reasonably needed for their function. Hosting and database infrastructure processes service data. A configured transactional email provider receives message destination and delivery content. Stripe receives account and purchase details only when billing is used and processes payment details on its hosted pages. OpenStreetMap receives direct browser tile requests only when the interactive map loads.
Restricted internal Slack project-review notifications are designed to contain public project facts only, not contractor profiles, customer account details, passwords, payment data, or bid workspace notes.
9. Questions and rights requests
Use the privacy contact below for access, correction, portability, objection, restriction, deletion, consent withdrawal, or an appeal provided by local law. PinPointe may verify identity and company authority before acting. See the Privacy Notice for the broader explanation of processing and disclosures.