Effective Date: August 12, 2024

Introduction

We are committed to protecting the privacy of our visitors and users. This Privacy Policy outlines how we collect, use, and safeguard your personal information when you interact with our online services.  

This policy applies to all visitors, users, and others who access or use pigmint.io, admin.pigmint.io, or any of our demo websites (*.demo.pigmint.io). By using our web applications, you consent to the collection and use of your information as described in this policy.

If you have any questions or concerns about our privacy practices, please submit an inquiry on our contact form.

Definitions

Site Account: Refers to the account created for the entity Pigmint services are being provided to.

Site Manager: Refers to the main point of contact for a Site Account. This role has full authorization to make changes to the account.

Third-Party Cookies

We use third-party cookies for security, authorization, and analytics. Cookies for analytics through Google Analytics are optional and are not enabled until the user provides explicit consent through our cookie consent pop-up. Most embedded widgets enabled to be added to blogs (to include all posts on our Docs page) will require the use of third-party cookies for security and authorization (which cannot be declined). We maintain strict control over which sources content can be embedded from. You can find the current list of allowed embeddable content sources here: Blogs: Embed Source Allow List. While we do vet embed source addition requests to ensure the providers have an updated privacy policy that includes details on all cookies used, we are not responsible the privacy practices of third parties.

We currently do not use any other third-party cookies on our websites.

Data Collection

We limit our data collection to what is necessary for security and auditing. We collect the following information for entities that create a site account with Pigmint:

• Entity Name

• Entity Address

• Entity Phone Number

• Payment information (through Square)

• Any data entered into Pigmint Admin

We further collect the following personally identifiable information (PII) for our users:

• Full Name (as provided)

• Email Address

• Phone Number

When users accept an invite to admin.pigmint.io, they are granting permission for this data, along with their user activity and content created on the application, to be managed by their site account’s Site Manager. If a user wishes to remove all of their data from Pigmint databases, they must request removal from the relevant Site Manager. The Site Manager must request removal for their users. If the user is attached to multiple site accounts, they must request removal of their data from all Site Managers.

If a user does not request their data be removed after being removed from a site account, their data will remain intact until the closure of the site account.

Tracking

We maintain logs on user activity, system health, and security.

Here is what we track:

• User activity in admin.pigmint.io for auditing. User activity includes all add, edit, and delete operations in Pigmint Admin. This data is available to the Site Manager on request and is the property of the site's entity. Users that wish to request their audit data be deleted must contact their Site Manager. Site Managers that would like to request a user's audit data be deleted can submit a ticket with support.

• Errors. Any errors that arise from the client (i. e. the web app you use) or server (i. e. where your client makes requests to retrieve data) are logged in Google Cloud Logging. This is to help us identify issues and troubleshoot errors. Data that is logged include:

  • IP address of the source client

  • Timestamp of the activity

  • Details of the error message

  • User details, to include email address and user id

    • This data is not logged by default, but may be logged for troubleshooting specific errors.

• Page Views. Pigmint.io and all websites on the Pigmint platform track hits for main pages. This only tracks a timestamp for each view; no user data is stored.

Third Party Services

Infrastructure

Our services are hosted in Firebase, and as an extension, Google Cloud. Google, as an infrastructure provider, has inherent access to all of our data. For more information, see Google Cloud’s privacy statements:

• https://cloud.google.com/terms/cloud-privacy-notice

• https://firebase.google.com/support/privacy

ReCAPTCHA

We use Google’s ReCAPTCHA v3 service to detect and prevent bot activity. See Google’s Privacy Policy and Terms of Service:

• https://policies.google.com/privacy

• https://policies.google.com/terms

Learn more about ReCAPTCHA v3 here:

• https://developers.google.com/search/blog/2018/10/introducing-recaptcha-v3-new-way-to

• https://developers.google.com/recaptcha/docs/v3

Payments

Our payments are processed through Block Inc, AKA Square. The following billing account information is shared with Square:

• Email address

• Billing address

• Name of billing account holder

• Payment methods, including card and bank details.

For more information, see Square’s privacy statements:

• https://squareup.com/us/en/legal/general/privacy-no-account

• https://squareup.com/us/en/legal/general/buyer-features

Changes to this Policy

This policy is publicly accessible from our Docs page. We will notify active Pigmint Admin (admin.pigmint.io) users of significant material changes to this policy via email.