Privacy Policy for PointPennyPincher

Last updated: October 8, 2026

1. Introduction

Welcome to PointPennyPincher. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. By accessing or using PointPennyPincher, you agree to the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must not access or use PointPennyPincher.

2. Information We Collect

2.1. Personal Information:

  • Account Information: If you create an account or register for PointPennyPincher (where applicable), we may collect certain details such as your name, email address, username, or other identifying information.
  • User Content: We collect the point balances, associated program names, and other content (“User Content”) you submit when interacting with PointPennyPincher.

2.2. Automatically Collected Information:

  • Usage Data: We may collect information about how you interact with PointPennyPincher, such as the features you use, the date and time of your visits, and other similar details.
  • Device and Connection Information: We may collect information about the device you use to access PointPennyPincher (e.g., IP address, operating system, browser type, device identifiers).
  • Cookies and Similar Technologies: We may use cookies, web beacons, and similar tracking technologies to collect information about your usage of PointPennyPincher and to provide a more personalized experience.

2.3. Information from Third Parties:

We may receive information about you from third parties, such as service providers, analytics companies, or other business partners, and combine it with the information we collect from you directly.

2.4. Reservation and Email Imports:

If you use redemption tracking or forward a confirmation to our import address, we process the email's sender and recipient headers, message identifiers, received time, subject, text, and supported PDF or image attachments. These can include traveler details, travel dates, routes, properties, loyalty programs, points, prices, taxes, and booking references. Forward only information you are authorized to share, and remove unrelated personal information or payment details before forwarding.

We use AI extraction to suggest a private Draft for your review. Automated results may be incomplete or incorrect. A forwarding address must be verified and connected to one account at a time; moving that connection affects future imports and does not move previously imported records.

3. How We Use Your Information

  • Providing and maintaining our services, including displaying your point balances.
  • Managing user accounts, verifying forwarding addresses, routing email imports, and creating reviewable redemption Drafts.
  • Sending verification codes and limited setup notices when an authenticated forwarding address cannot be used for importing. We do not include reservation details or disclose account ownership in setup notices.
  • Responding to your inquiries.
  • Improving our services.
  • To comply with applicable laws, regulations, or legal obligations and to enforce our Terms of Service or other agreements.

4. Information Sharing and Disclosure

  • We may share your information with third-party service providers who perform services on our behalf (e.g., hosting, analytics, customer support). These service providers are authorized to use your information only as necessary to provide services to us.
  • In the event of a merger, acquisition, financing, or sale of assets, your personal information may be transferred or disclosed as part of the transaction, subject to reasonable confidentiality arrangements.
  • We may disclose your information to law enforcement, government authorities, or other third parties when we are legally compelled to do so, or when we believe it is necessary to comply with legal obligations, protect our rights and property, or respond to an emergency.
  • We may share your information for any other purpose disclosed to you at the time we collect the information or pursuant to your consent.

Zoho Mail receives and stores emails sent to our import mailbox and sends verification and setup messages. Our hosting providers process application data. Email text and supported attachments are sent to the configured AI extraction service; the current importer uses our operated model service. We do not currently use the Claude API for this feature. If we change these processing arrangements, we will update this disclosure. We do not use imported reservation content to train our extraction model.

5. Data Security

We implement reasonable safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. However, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, such as: the right to request access to, correction, or deletion of your personal information. To exercise these rights, please contact us at [email protected].

7. Data Retention

We retain your personal information for as long as it is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. When we no longer need your personal information, we will take reasonable steps to securely delete or de-identify it.

The application stores extracted Draft fields and limited source metadata for review, troubleshooting, and duplicate prevention. It does not persist raw email bodies, original MIME, attachment files, or raw AI responses in the application database. Original emails and attachments remain in the Zoho mailbox until deleted there; dismissing a Draft in the app does not delete the source email from Zoho.

Disconnecting a forwarding address stops future routing to your account. Dismissing an unsaved import clears its extracted candidate and sender metadata from the app, while a minimal message record remains for duplicate prevention. Saved redemptions remain until deleted. For an unlinked sender, we may temporarily retain the authenticated email address to limit setup notices, then clear it after 24 hours during a subsequent mailbox poll. We do not fetch the reservation body for unlinked senders. Contact [email protected] to request deletion of retained import data or source mailbox emails.

8. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to collect information about your usage of PointPennyPincher and to provide a more personalized experience.

9. Public vs. Private Point Balances

You can choose to make your point balances public or private. If your point balance is public, it (along with the associated program name) will be visible to other logged-in users. If your point balance is private, it will only be visible to you. You can change your privacy settings on your Account page.

10. Children's Privacy

PointPennyPincher is not intended for use by individuals under the age of 18, and we do not knowingly collect personal information from children.

11. International Data Transfers

Your personal information may be transferred to and processed in countries other than your own, where data protection laws may differ from your local jurisdiction. In such cases, we will take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will revise the “Last Updated” date at the top of this page. Your continued use of PointPennyPincher after any such changes constitutes your acceptance of the revised Privacy Policy.

13. Compliance with Privacy Laws

We strive to comply with applicable data protection laws.