Privacy Policy

1. Overview

This Privacy Policy explains what information Chimera Compound, LLC collects, how we use it, and the choices you have. It applies to everyone who uses the Service: Builders who create and manage sites, Owners who pay through it, and anyone who subscribes to a plan or buys credits directly, whether on our website or in our iOS app.

2. Information we collect

Account information such as name, email, and authentication details. Site content you create or upload, including business details, images, and text. Billing information needed to process payments: purchases made on our website are processed by Stripe, and purchases made in our iOS app are processed by Apple and recorded through RevenueCat. We do not store full card numbers or your Apple payment details. Usage and device information such as IP address, browser type, and interactions with the Service, collected to operate and secure it.

Business information used to build a site. When you build a site for a business, we use publicly available details about that business, and where you supply a web address or a social profile we retrieve that page and extract details from it, such as services, hours, prices, and descriptions. Where you connect or upload your own material, including photos, logos, menus, and screenshots, we process that too.

Businesses shown to Builders. To help Builders find businesses that may want a website, the Service shows information that businesses have made public, such as the business name, category, address, public phone number, website status, and public social media profile and posts, drawn from open map data and public sources. Where a business is run by an individual, some of this can be personal information. We use it for our legitimate interest in connecting local businesses with web designers, we show only what the business has published, and we do not sell it. A business can ask not to be shown at any time at pindrop.host/remove or by emailing support@pindrop.host, and we will stop suggesting it to Builders.

3. Payments and subscriptions

Chimera Compound, LLC offers paid subscriptions and credit purchases through two separate channels, and how a purchase is billed and managed depends on where you bought it.

If you subscribe or buy credits on our website, payment is processed by Stripe. You can view invoices, update your payment method, and cancel at any time through the Stripe billing portal linked from your account. If you subscribe or buy credits inside our iOS app, the purchase is an Apple in-app purchase, processed by Apple and recorded through RevenueCat, billed to your Apple ID and managed and cancelled in your Apple ID subscription settings. If you subscribe or buy credits inside our Android app, the purchase is a Google Play in-app purchase, processed by Google and recorded through RevenueCat, billed to your Google account and managed and cancelled in the Play Store. Neither is managed or cancelled by Chimera Compound, LLC.

Because these are separate systems, a subscription started on the website is managed through Stripe and a subscription started in the app is managed through Apple. We do not move a subscription between the two, and cancelling in one place does not cancel a separate subscription created in the other.

Separately, where a Builder bills an Owner for a website through the Service, that payment is processed by Stripe as described in our Terms of Service.

Subscription charges, including monthly renewals and a trial that converts to a paid plan, are not refunded, including where a renewal was not intended or the account was not used during that period. Cancelling stops future renewals, and the plan stays active until the end of the period already paid for. If you believe a charge was made in error, for example a duplicate charge, contact us and we will review it.

4. How we use information

We use information to provide and improve the Service, publish and host websites, process payments and payouts, prevent fraud and abuse, comply with legal obligations, and communicate with you about your account and transactions.

We also send occasional emails about the Service itself, such as offers, product news, and leads near you that may be worth building for. Every one of those carries an unsubscribe link, and unsubscribing stops them without affecting the account and transaction emails you need in order to use the Service.

We use artificial intelligence to generate and edit site content. To do that, the business details described above, the text and images on the site you are working on, and images of how that site renders are sent to an AI provider so it can produce or revise the result you asked for. Our standard building and editing uses Anthropic. Where you choose a different model in the builder, that material goes to the company behind the model you chose: OpenAI, Google, or Moonshot AI. Moonshot AI is based in China, so choosing one of its Kimi models sends that material to China.

5. How we share information

We share information with the service providers that help us operate the Service: Stripe (web payments and payouts), Apple, Google Play and RevenueCat (subscriptions and purchases made in our mobile apps), Supabase (database and authentication), Cloudflare (hosting, delivery, and published sites), Vercel (application hosting), Anthropic, OpenAI, Google and Moonshot AI (AI that generates and edits site content, as described above), fal.ai (AI image generation), Resend (email delivery), Mapbox (maps in the builder), Google and Yelp (business photos and details), and Twilio (text messages about online orders, where a business turns them on). We share information as needed to complete a transaction you request, to comply with law, or to protect our rights. We do not sell your personal information for money. Sharing with advertising platforms for measurement is described next.

Business details used to build sites, including preview sites, come from the Overture Maps open data set, from information the business has published publicly, and from material you supply. Photos and other details shown in a generated site may be owned by the business, a photographer, or another third party, and remain subject to the terms of whoever supplied them.

We share a limited set of conversion information with Meta and TikTok so we can measure whether an advert led to a signup, and afterwards whether that person built a site, started a trial, or paid. This is sent both from your browser and from our servers. It includes a one-way encrypted (hashed) form of your email address and, where we hold one, your phone number; a hashed form of your account id; the advertising click identifier from the advert you clicked; your IP address and browser type; and these events: the pages you view, signing up, opening a business on the map, starting a trial, your first payment and later payments with their amounts, and building and publishing your first site. It is used for advertising measurement and to help those platforms show our adverts to people more likely to find them useful. For visitors in the United States, information sent to Meta is sent under Meta's Limited Data Use setting.

Whether this happens depends on where you are. In the European Economic Area, the United Kingdom, and Switzerland, we ask first, and nothing is shared without your yes. Everywhere else it is on by default, and you can turn it off at any time. A no always wins: from the cookie banner, from the "Do not sell or share my personal information" link in the footer of our website, from pindrop.host/privacy/choices, or from your browser's Global Privacy Control signal, which we honour automatically. See the section on cookies below.

6. Retention

We keep information for as long as needed to provide the Service and to meet legal, accounting, and reporting obligations. You may request deletion of your account information, subject to records we are required to retain.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at the address below. Owners who pay through the Service can request a copy or deletion of the personal information we hold about them. A business that does not want to be suggested to Builders can ask at pindrop.host/remove.

US state privacy rights. Some US state laws, including California's, treat sharing information with advertising platforms for targeted advertising as "sharing" or as a "sale", even when no money changes hands, and give you the right to opt out. To opt out, use the "Do not sell or share my personal information" link in the footer of our website or go to pindrop.host/privacy/choices. We also treat a Global Privacy Control signal from your browser as an opt-out, without you needing to do anything else, and we show that it was honoured. Opting out does not affect your ability to use the Service. You can also ask us to access, correct, or delete your information by contacting us at the address below, and we will not treat you differently for using any of these rights.

8. Cookies and advertising

We use cookies and similar technologies that are necessary to run the Service: keeping you signed in, remembering your preferences, and protecting against abuse. These cannot be turned off without breaking the Service.

We also use advertising cookies and similar technologies from Meta and TikTok to measure whether an advert led someone to sign up, use the Service, or pay, and the matching information is sent from our servers too, as described above. In the European Economic Area, the United Kingdom, and Switzerland, these are off until you say yes. Everywhere else they are on by default. Wherever you are, you can say no or change your mind at any time at pindrop.host/privacy/choices or through the "Do not sell or share my personal information" link, and a Global Privacy Control signal from your browser is treated as a no. Once you say no, we stop sending this information to Meta and TikTok from your browser and from our servers. Saying no does not affect your ability to use the Service. You can also control cookies through your browser settings and through Meta's and TikTok's own ad preferences.

9. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes and contact

We may update this Privacy Policy from time to time; material changes take effect when posted. Questions or requests can be sent to support@pindrop.host.