Privacy Policy

Last updated: March 3, 2026

1. Introduction

PinPoint ("we", "our", "us") provides a Slack-integrated video review tool. This Privacy Policy explains how we collect, use, and protect information when you use our service.

2. Information We Collect

We collect the following information through your use of the PinPoint Slack app and web player:

• Slack User Information: Your Slack user ID, display name, and workspace ID. We receive this from Slack's API when you interact with the bot.
• Video Metadata: Channel ID, message timestamp, uploader ID, video URL, and video filename. We do not store video file content — videos remain hosted on Slack or external platforms.
• Comments: Timestamped review comments and optional annotation screenshots you submit through the web player.
• Web Player Session: The name you enter when joining a review session.

3. How We Use Your Information

We use collected information solely to:

• Provide the video review and commenting functionality
• Sync comments between the web player and Slack threads
• Display reviewer names alongside their comments
• Track comment resolution status

We do not sell, share, or monetize your personal information.

4. Slack API Data

Our app accesses the following Slack API scopes:

• channels:history, channels:read — To detect videos shared in channels
• chat:write — To post review comments back to Slack threads
• files:read — To stream video files through our secure proxy
• files:write — To manage file assets related to reviews
• users:read — To display reviewer names
• app_mentions:read — To respond to @PinPoint commands in channels
• reactions:write, reactions:read — To add/remove ✅ reactions on resolved comments

We comply with the Slack API Terms of Service.

5. Data Storage & Security

Data is stored in a PostgreSQL database hosted on Render. Video files are never stored on our servers — they are streamed directly from Slack or the original hosting platform through an authenticated proxy.

Review link URLs contain time-limited, cryptographically signed tokens that expire after 7 days.

6. Data Retention

We retain video metadata and comments for as long as the associated Slack workspace has the app installed. Upon uninstallation, workspace data may be deleted.

7. Your Rights

You have the right to:

• Request access to your data
• Request deletion of your comments or data
• Uninstall the app, which will remove workspace access

8. Third-Party Services

We use the following third-party services:

• Slack — Messaging platform and API
• Render — Application and database hosting

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date.

10. Contact

For privacy inquiries or data requests, contact us at: support@pinpointapp.dev

---

See also: Terms of Service · Help & Support

© 2026 PinPoint. All rights reserved.