Privacy Policy

Controller: Circular Smart Limited, a company registered in Ireland (company number 744872), registered office: 39 Castleyard, 20/21 St Patrick's Road, Dublin, Ireland. Contact: support@pinlayout.com · pinlayout.com · circularsmart.com

This Privacy Policy explains what information PinLayout (the "app") and our website and services collect, how we use it, and the choices and rights you have. PinLayout is a window-management app for Windows and macOS, designed to work primarily on your device; we collect as little as possible.

1. Information we collect

• a) Account & licensing. Your email address, license key, and a hashed device identifier (a machine fingerprint — not readable hardware serials), used to grant your trial, activate Pro, and enforce the per-device seat limit.
• b) "Suggest with AI" (optional). Only when you choose this feature, the app sends your monitor sizes/arrangement and the names of apps you have open (including browser profile names) to our servers, which pass it to Anthropic (Claude) to generate a layout. We do not send window contents, documents, keystrokes, or screenshots, and this data is not used to train AI models. The feature runs only when you click it.
• c) Payments. Processed by Stripe; we receive limited billing metadata (country, last 4 digits, subscription status) but not your full card number.
• d) Technical & usage data. App/OS version, language, and — on the website — IP address, browser type, and pages requested (server logs), to operate and secure our services.
• e) Diagnostics & support. What you include when you contact support or send feedback. Any future crash/diagnostic collection will be described here and made opt-in where required.
• f) Cookies & similar technologies. See section 3 and our Cookie Policy.

Providing account/payment data is necessary to license the app; if you don't provide it, we can't give you a license. The app works offline for core features and contacts our servers only to validate your license and, if you use it, for AI suggestions.

2. How we use information

• Provide and secure the app and your license (activation, trial, seat limits).
• Generate AI layout suggestions when you request them.
• Process payments and manage your subscription.
• Respond to support and improve the product.
• Send service messages and, with your consent, marketing (section 4).
• Comply with legal obligations and prevent abuse/fraud.

3. Cookies, analytics & advertising

Our website uses essential cookies to function, and — only with your consent — analytics (Google Analytics) and advertising (Meta/Facebook Pixel) cookies. These non-essential cookies do not load until you accept them via our cookie banner, and you can change your choice any time. Full details, providers, and controls are in our Cookie Policy.

4. Marketing communications

We send marketing email only to people who have opted in. Every marketing email includes a one-click unsubscribe, and you can opt out any time by contacting us. Service/transactional messages (e.g. license delivery, security notices) are not marketing and may still be sent.

5. Legal bases (EEA/UK — GDPR)

We rely on performance of a contract (providing the app/license), legitimate interests (securing the service, preventing abuse, improving the product), consent (non-essential cookies, marketing), and legal obligation (tax, accounting). Where we rely on legitimate interests we have balanced them against your rights.

6. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. "Suggest with AI" produces a suggested layout that you choose whether to apply — it is not an automated decision about you.

7. Sub-processors

We share data only with providers who process it on our behalf: Anthropic (AI), Stripe (payments), our email provider, our hosting/infrastructure provider, and — with consent — Google (analytics) and Meta (advertising). A current list is on our Legal Notice. We do not sell your personal information.

8. International transfers

Some providers process data outside the EEA (including the United States). Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

9. Data retention

We keep account and license data while your account/license is active and as needed for legal, tax, and security purposes, then delete or anonymize it. AI suggestion requests are used to generate your result and are not used to profile you.

10. Your rights

EEA/UK (GDPR): you may access, correct, delete, or port your data, object to or restrict certain processing, and withdraw consent. Our lead supervisory authority is the Data Protection Commission (DPC), Ireland (dataprotection.ie); you may also complain to your local authority.

California (CCPA/CPRA) & other US states (e.g. Virginia, Colorado, Connecticut, Utah): you may request to know, access, correct, and delete your personal information, and to opt out of "sale" or "sharing" for cross-context behavioural advertising. We do not sell data; the Meta advertising cookie may constitute "sharing" — you can decline it in our cookie settings. We will not discriminate against you for exercising these rights.

To exercise any right, contact support@pinlayout.com. We may need to verify your identity, and you may use an authorized agent where the law allows.

11. Data breaches

If a personal-data breach occurs, we will notify the DPC within 72 hours where required and affected individuals without undue delay when the law requires it.

12. Security

We use encryption in transit (HTTPS), signed and tamper-evident license tokens (Ed25519), and secure server-side secret storage. No method is 100% secure, but we take reasonable measures to protect your information.

13. Children

PinLayout is not directed to children under 16, and we do not knowingly collect their personal information.

14. Third-party links

Our site and app may link to third-party sites we don't control; their privacy practices are their own.

15. Changes

We may update this policy; we will change the "Last updated" date and, for material changes, provide a more prominent notice.

16. Contact

Circular Smart Limited (registered in Ireland, company number 744872)
Registered office: 39 Castleyard, 20/21 St Patrick's Road, Dublin, Ireland
support@pinlayout.com · pinlayout.com · circularsmart.com