Privacy Policy

Operator: João Pedro Reis, trading as PinkPepper. NIF 256709661. Address: Rua Duarte Galvão 14 r/c dto., 1500-254 Lisboa, Portugal. Contact: support@pinkpepper.io. João Pedro Reis is the data controller for account, billing, support, product, and analytics data unless a DPA states otherwise.

We process account/profile/auth data, prompts, files, generated outputs, conversation metadata, billing identifiers, support and review messages, operational logs, rate-limit keys, analytics identifiers, and cookie choices.

We use data to provide the service, authenticate users, maintain security, bill customers, answer support requests, improve reliability, and meet legal obligations.

Legal bases include contract, legitimate interests, consent for optional analytics, and legal obligation.

Account deletion, conversation retention jobs, billing retention, support records, backups, and provider logs follow documented operational periods and legal retention duties.

Audited vendors used to provide the service include Supabase, Vercel hosting, Vercel Analytics, Vercel Speed Insights, Groq, OpenAI, Stripe, Resend, Upstash, Google Analytics, and Google sign-in. Hosting, encryption, international transfers, backups, certifications, and training-use claims are qualified where they depend on provider contracts or dashboard configuration.

Where data leaves the EEA/UK, PinkPepper relies on adequacy decisions, SCCs, provider transfer terms, or qualified contract controls as applicable.

Customer prompts, files, and outputs are sent to AI providers only to provide requested features. Training-use claims are qualified by provider terms and account settings.

You may request access, correction, deletion, restriction, portability, objection, and withdrawal of consent by contacting support@pinkpepper.io.

We use access controls, HTTPS, provider security controls, rate limits, and scoped storage. Encryption, logging, backup, region, and certification claims are qualified by the audit evidence.

Cookie choices are described in the Cookie Policy. Optional analytics require consent and may be withdrawn.

CNPD: https://www.cnpd.pt/. ICO: https://ico.org.uk/. Portuguese consumer and ADR information: https://www.consumidor.gov.pt/. Electronic Complaints Book information: https://www.livroreclamacoes.pt/Inicio/. PinkPepper may be accessed from the United Kingdom. UK representative status is unresolved and must be confirmed by qualified legal review or appointment before treating that point as complete.

We publish updated versions and may ask for renewed acceptance when privacy terms materially change.