Trust & Security

Accounts are protected with email and password authentication. Sign-in sessions are stored locally on your device and can be revoked at any time by signing out.

Sensitive actions such as withdrawals and profile changes require an active session.

All traffic between your device and our servers is encrypted in transit using HTTPS. Application data is stored in a managed Postgres database with row-level security so each user can only access their own records.

Administrative access to user data is limited to authorized staff for support and compliance purposes.

Deposit, withdrawal, and investment records are validated server-side before they are processed. Balances, payouts, and investment status can only be changed by our backend — never directly by a user's device.

Pending transactions are reviewed before being approved.

We collect the information you provide when creating an account (name, email, phone, country) and the records of your activity on the platform (deposits, investments, withdrawals, support messages, comments).

We do not sell personal data to third parties.

PinterInvest runs on managed cloud infrastructure with automated backups and access controls. Database changes are tracked through versioned migrations.

You can request a copy of your account data or ask for your account to be deleted by contacting our support team. Some records may be retained where required for legal or anti-fraud purposes.

If you believe you have found a security vulnerability, please report it to our support team privately. Do not post details publicly. We appreciate responsible disclosure and will respond as quickly as we can.

For security questions, privacy requests, or any concern about your account, please reach out through the in-app Support page.

We secure the platform, but account security is a shared effort. Please use a strong unique password, keep your email account secure, and never share your sign-in credentials with anyone — including people claiming to be PinterInvest staff.