Privacy Policy

The data controller is EMBEDDED ENGINEER LIMITED, 15 Church Street, Lochwinnoch, Renfrewshire, PA12 4AD, United Kingdom. For any privacy question, data request or complaint, contact support@embeddedengineer.shop or +44 7273035775.

Pinout is an online-only software service. We do not sell physical goods, source components or provide any on-site service.

• Account data: your email address and, if you create one, account and subscription identifiers.
• Tool inputs: the project ideas, board choices and text you enter to generate plans, sketches and showcase scripts, and any files or example data you choose to attach.
• Generated results: the plans, parts lists, sketches and scripts produced for you, stored so you can revisit them if you have a saved workspace.
• Payment data: billing details processed by Stripe. We receive confirmation and limited metadata (such as the last four digits, card brand and billing country) — never your full card number or security code.
• Support data: the messages, email address and any details you send us through the contact and support forms.
• Technical data: IP address, device and browser type, and basic usage/diagnostic events needed to run and secure the service.

We collect personal data from the following collection sources:

• Directly from you: the project ideas, board choices and text you type into the tool (your user inputs), the account details you register, and the messages and email address you send through the contact and support forms.
• Generated by the service for you: the plans, parts lists, sketches and scripts produced from your inputs (your generated outputs).
• From Stripe, our payment processor: subscription and payment confirmations and limited billing metadata (never your full card number).
• Automatically from your device: IP address, device and browser type and basic usage/diagnostic events, collected by your browser and our hosting when you use the site.
• From the AI generation provider, where one is connected: the result returned for a request you submit.

• To provide the tool — generating and storing your plans, sketches and scripts (legal basis: performance of a contract).
• To take payment and manage subscriptions through Stripe (legal basis: performance of a contract).
• To provide support and respond to your messages (legal basis: legitimate interests / contract).
• To keep the service secure, prevent abuse and debug problems (legal basis: legitimate interests).
• To meet legal, accounting and tax obligations (legal basis: legal obligation).
• For optional analytics or product emails only where permitted or with your consent (legal basis: consent / legitimate interests).

Your user inputs — the text you enter and any files you attach — are processed to produce your requested plan, sketch or script (your generated outputs) and to operate the service. When an AI generation provider is connected to power the tool, your user inputs are transmitted to that generation provider solely to return your generated outputs, under that provider's processing terms; the generation provider acts as our processor for that purpose and receives no payment details.

• We do not use your user inputs or generated outputs to train our own or any third party's AI models.
• We do not sell your user inputs, generated outputs or uploads.
• The AI generation provider receives only the user input needed to return your result, and only for that request.
• You can export your generated outputs at any time and ask us to delete your user inputs, generated outputs and account data.
• Do not enter other people's personal data, or confidential or safety-critical information, into the tool — it is a hobby-reference planner.

Payments are processed by Stripe, Inc. and its group companies as an independent processor. Card details are entered on Stripe-hosted checkout and are handled by Stripe under PCI-DSS. Pinoutnever receives or stores your full card number, expiry or security code. We receive only the confirmation and limited metadata needed to manage your subscription. Stripe's own privacy notice governs its processing of your payment data.

We share data only with service providers that help us run Pinout, under contract and only as needed:

• Hosting and delivery: our cloud hosting and content-delivery provider.
• Payments: Stripe (subscriptions, invoices, refunds, disputes).
• Database and storage: our managed database/storage provider for accounts, projects and support messages.
• Email: our transactional email provider for account and support messages.
• AI generation: any connected AI provider, used only to return your requested output.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Some processors may store or process data outside the UK/EEA (for example in the United States). Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement/Addendum or EU Standard Contractual Clauses, together with additional measures where needed.

• Account and subscription data: for the life of your account and then as required for legal, tax and accounting purposes (typically up to 6 years for financial records).
• Tool inputs and generated results: kept while your workspace is active; deleted on request or within a reasonable period after account closure.
• Support messages: typically up to 24 months after your query is resolved.
• Technical/security logs: a short period sufficient for security and troubleshooting.

We protect your data with encryption in transit (HTTPS), strict access controls that limit who can see personal data, and reputable, security-reviewed service providers. Payment card details are handled entirely by Stripe on its secure systems and are never stored on ours. We keep our safeguards under regular review. No method of transmission or storage is completely secure, but we work hard to protect your data and will notify you and any regulator where the law requires.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate data or complete incomplete data.
• Delete your data (right to erasure) where the law allows.
• Restrict or object to certain processing, including direct marketing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• For California residents (CCPA/CPRA): know, delete, correct, and opt out of any sale or sharing — we do not sell or share personal data — without discrimination.

To exercise any right, email support@embeddedengineer.shop. We respond within the timeframes required by law (generally one month under UK/EU GDPR). You can also authorise an agent to act for you.

We do not sell your personal data and we do not share it for cross-context behavioural advertising. There is therefore nothing to opt out of in that respect, but you can still contact us to exercise any of the rights above.

We use strictly necessary cookies to run the site and keep you signed in, and only optional analytics where permitted. See our Cookie Policy for the categories and how to control them.

Pinoutis not for children under 13, and users aged 13–17 must have a parent or guardian's consent and adult supervision for any hands-on building. We do not knowingly collect data from children under 13; if you believe a child has given us data, contact us and we will delete it. We do not make decisions producing legal or similarly significant effects about you by purely automated means.

Contact EMBEDDED ENGINEER LIMITED at support@embeddedengineer.shop or +44 7273035775, 15 Church Street, Lochwinnoch, Renfrewshire, PA12 4AD, United Kingdom. If you are in the UK you may also complain to the Information Commissioner's Office (ico.org.uk); in the EEA, to your local supervisory authority. We ask that you contact us first so we can help.