Privacy and security in Pin Drop

Pin Drop is designed to organise real-world information. That information can include locations, notes, routes and operational data, so privacy and security are taken seriously from the start.

This page explains how information is stored, who can access it and how users remain in control of their data while using the platform.

More detailed information about managing your data can be found in the data management guide, while account permissions and workspace access are covered in accounts and access.

Data ownership

Users remain in control of the information they create in Pin Drop.

For personal accounts, all pins, tags, notes and other content belong to the individual user who created them. This information is private to the account unless it is intentionally shared.

For team workspaces, data belongs to the workspace rather than an individual user. Administrators manage membership and permissions, and members collaborate within the same shared map. Depending on how a workspace is configured, members may be able to view, edit or contribute to shared content.

Data visibility

Content in Pin Drop is only visible to the people who have access to it.

Personal accounts are private and can only be accessed by the account holder.

In team workspaces, content is visible to members of that workspace according to the permissions assigned by administrators. Workspaces are collaborative by design, meaning team members may be able to view or interact with the content created by others depending on their role.

Further details on how roles and workspace membership work can be found in the accounts and access guide.

Where data is stored

Pin Drop uses Microsoft Azure cloud infrastructure to securely store application data. At present, data is hosted in the United States, including system backups.

Azure provides enterprise-grade infrastructure with built-in security controls and monitoring.

For organisations that require specific data residency or sovereignty arrangements, custom hosting configurations can be provided for certain team workspaces.

Encryption and transport security

All communication between the Pin Drop apps and our servers is secured using HTTPS.

Data stored within the platform is encrypted at rest within the Azure infrastructure. These protections help ensure that information remains secure while being stored and transmitted.

Account security and authentication

Pin Drop uses passwordless authentication to reduce the risks associated with password storage.

Users log in using a secure email magic link or verification code. Because authentication is handled through this process, passwords are never stored within the system.

When signing into the web application, users authenticate their session by scanning a QR code using the mobile app. This confirms the login using an already verified device.

Platform access and support

Access to Pin Drop systems is restricted to authorised personnel.

In some cases, Pin Drop staff may access user data when required for debugging, support or resolving technical issues. This access is limited to what is necessary to maintain and improve the service.

Data exports and portability

Users can export their information from Pin Drop at any time. Exported data is provided as a CSV file containing the information created within the platform.

Exports are designed to include the data that users have created, although some system-generated information may not be included.

More details on exporting information can be found in the data management guide.

Deleting accounts and data

Users can delete their account and associated data directly from within the application.

Instructions for removing your account and data are provided in the help article How do I delete my account or data?

Team workspaces can be removed by administrators where required.

Third-party services

Pin Drop may rely on third-party services to support parts of the platform such as mapping and location data. These services help power search results, mapping and geolocation features.

Where external data sources are used, the information returned is not linked to individual users.

Reporting a security concern

If you believe you have discovered a security issue or vulnerability within the platform, please contact us so our team can investigate.