Operator App Privacy Supplement

1. Who this covers

Four groups of people interact with us, and we hold different information about each:

• Operators — the businesses that own the vending machines carrying our screens, and the people who sign in to the Pinpoint Vending app to track earnings and get paid.
• Venues — the places where machines stand. We hold a venue's name and address as part of a screen's location.
• Advertisers and their intermediaries — who buy the screen time, generally through an advertising exchange rather than directly from us.
• Members of the public near a screen. We do not ask you for anything and we do not know your name. Section 2.4 explains that we do not measure you, and section 5 explains what a screen sends when it asks for an ad.

2. What we collect

2.1 Account information

When an operator creates an account we collect an email address, the account holder's first and last name, and a password — or, if you sign in with Google, a confirmation from Google that you control that address. We never see your Google password. Google also passes on the name and profile picture on your Google account; our sign-in provider stores them, and the app does not use them. Our sign-in provider records the IP address and browser of each sign-in, for security. We also record which version of our terms you accepted and when, together with the browser user-agent string at that moment, because we may later need to show what you agreed to.

2.2 Screen and location information

For each screen you add, we collect the name you give the location, its street address, the type of machine, and any photograph you upload. We also hold a permanent identifier that the machine generates for itself, and the device number printed by the machine's vending software where one exists. The address and machine type can also be set on the machine itself, which reports them to us.

We keep the original of each machine photograph, as taken, in private storage. Some photographs were given directly to our media partner's advertising platforms, which may have produced an edited or AI-generated version. Staff can see that version, and we hold its web address rather than a copy. We show operators the original.

When you type an address, the suggestions come from an outside service (see section 4). When you scan the code on a machine's sticker, your phone reads it on the device; the camera picture is not sent anywhere.

2.3 Machine telemetry

Software on the machine reports to us once a day: how many ads it has played in total, the app version, the screen's resolution, the connection type, Wi-Fi signal strength, and how much network data the app has used since it was installed. We keep the latest report, when it arrived, and a daily count of ads played. This is how we know a screen has stopped working. It describes the machine, not any person using it. What a screen earns comes from our advertising partner's reports, not from this.

To place itself on the map, the machine looks up its address with OpenStreetMap's geocoding service or, if it has no address, estimates its location from its IP address using ipwho.is. It also checks GitHub for software updates. Each of these services sees the machine's IP address.

2.4 Audience measurement

We do not measure the people around a screen. None of our software uses a camera, sensor or radio to count or recognise people, and none of it captures images, video, faces, or the identifiers of nearby phones. If that changes, we will update this policy before it starts.

We do not attempt to identify any individual near a screen, and we do not ask anyone near a screen for information.

2.5 Advertising requests

When a screen is set up, it is registered with our media partner, 4 Corners Media Group, and the advertising platforms it works with. The registration includes the screen's name, street address, map coordinates, the direction it faces, its size and resolution, its hours, the type of venue, and the lowest price it will accept for an ad. Each time the screen asks for an ad, the request carries its advertising unit identifier and a user-agent string, and the connection reveals the IP address the machine is connected from. While an ad plays, the screen notifies tracking addresses that the advertiser supplies, so those companies see the machine's IP address too. Advertisers and their platforms use this to decide whether to bid and to confirm the ad ran. Section 5 explains how this counts as sharing, and how to opt out.

2.6 Payments

To pay you, we record what each screen earned, what we owe you, and what we have paid. Bank account numbers, tax identification numbers and identity documents go directly to Stripe and are held by Stripe — they do not pass through our systems and we cannot see them. We keep Stripe's identifier for your connected account, your bank's name and the last four digits of the account, the account's country, whether Stripe says it is ready to receive money, anything Stripe still needs from you, and any error from a payment attempt.

2.7 Content and correspondence

Images and videos you upload to run on your own screens, and anything you write to us through the help feature, including the messages we send back.

If you ask for a location or a machine on the Grow page, we also collect what you enter: what you need, how many machines, the phone number to call, the area you are looking in, how far you will drive, and any notes. We send it to our sales system as a lead, together with your name, your email address, your account name, and the name, address, machine type, status and device number of each screen on your account, so that whoever calls you knows what you already run.

2.8 Cookies and similar technologies

See our Cookie Policy.

3. How we use it

• To run your account, show you your screens, and calculate what you have earned.
• To pay you, and to keep records of payments for tax and accounting purposes.
• To set up advertising on a screen and to serve ads to it.
• To tell advertisers what a screen is worth, and to report what ran.
• To share screen data with our ad partner, as described in section 5.
• To notice when a screen has stopped working, and to answer your questions.
• To follow up on a request you make on the Grow page, including by phone.
• To detect fraud — for example, a machine reporting plays that did not happen.
• To meet legal obligations, including tax reporting on payments we make to you.

Apart from following up on what you asked for, we do not use your account information to advertise to you personally, and we do not sell your login details, earnings, or bank information to anyone.

4. Who we give it to

We use these companies to operate the service. Each receives only what its job requires:

We also disclose information:

• When the law requires it — in response to a valid subpoena, warrant or court order, or where necessary to protect someone's safety or our legal rights.
• If the business is sold — in a merger, acquisition or sale of assets, your information would transfer with it. We would tell you before that happened.

6. How long we keep it

Backups are overwritten on a rolling 30-day cycle, so deleted material can persist in backups for up to that long after you remove it.

7. How we protect it

• Every table enforces access rules at the database level, so one operator's records cannot be read by another even if the application has a bug.
• Data is encrypted in transit and at rest by our hosting provider.
• Payment records are append-only: entries can be added and corrected, never silently altered or deleted.
• Bank details and tax identifiers are held by Stripe, not by us.
• Access to production data is limited to staff who need it.

No system is perfectly secure. If a breach affects your personal information we will notify you and any regulator as the law requires.

8. Your rights and choices

Wherever you live, you can ask us to:

• tell you what we hold about you and give you a copy;
• correct something that is wrong;
• delete your account and the data tied to it, except records we must keep by law;
• stop sharing data about you with our ad partner, which for an operator takes the affected screens off advertising (see section 5).

Email privacy@pinpoint-vending.com. We will respond within 45 days, or tell you within that time if we need up to 45 more, and may ask you to confirm you control the account's email address before acting. If we turn a request down, you can appeal by replying, and we will answer the appeal within 60 days. We will not charge you more or treat you worse for exercising these rights. The one consequence is the one in section 5: a screen taken off advertising stops earning.

9. California rights

If you live in California, the CCPA as amended by the CPRA gives you the rights to know, delete, correct, opt out of sale and sharing, limit the use of sensitive personal information, and not be discriminated against for exercising them.

In the preceding 12 months we have:

• Collected identifiers (including phone numbers on Grow requests), commercial information, internet activity, geolocation, and financial account information (held at Stripe) — the categories described in section 2.
• Sold no personal information.
• Shared the location and network details of screens with our ad partner, which may count as geolocation and internet or network activity, as described in section 5.
• Disclosed for a business purpose the categories in section 4, to the companies listed there.

We do not knowingly sell or share the personal information of anyone under 16. You may use an authorised agent to make a request; we will ask for proof of their authority.

10. Outside the United States

The service is only for machines in the contiguous United States. We do not offer it to businesses in the European Economic Area or the United Kingdom. If you contact us from outside the United States, we will handle your request under section 8.

11. Children

The Pinpoint Vending app is for business users aged 18 or over and is not directed to children. We do not knowingly collect personal information from anyone under 18. Our screens sit in public places where children may be present. Ads are chosen by advertising exchanges, not by us, and operators can switch off categories of advertising on their own screens.

12. Where your data is processed

Our systems are hosted in the United States. Address suggestions come from Komoot, which is based in Germany, so what you type in the address box goes there. Our other service providers may process data in other countries.

13. Changes

We will post any change here and update the date at the top. If a change materially affects how we use your information, we will email account holders at least 30 days before it takes effect.

14. Contact us

Distinctive Vending LLC
Privacy: privacy@pinpoint-vending.com
Legal: legal@pinpoint-vending.com
Everything else: hello@pinpoint-vending.com · (929) 362-6078