Privacy Policy

Last updated: October 17, 2026

Who we are

Pinnacle HQ, Inc. is a Delaware corporation with its registered address at 131 Continental Dr, Newark, DE 19713, USA ("Pinnacle", "we", "us"). This policy explains how we handle personal information on our website hqpinnacle.co, on the Pinnacle Data site at data.hqpinnacle.co (including the Pinnacle Data Discovery portal), and on our invite-only partner portal at partners.hqpinnacle.co.

We are a US company. Some of our visitors, and some of the companies that work with us, are in the European Union and the United Kingdom, so this policy also includes a section for them: Visitors in the EU and UK.

For any privacy question or request, email privacy@hqpinnacle.co.

What we collect and why

Where
Contact form (hqpinnacle.co/about/contact)
What we collect
Name, work email, company, phone (optional), the service you are interested in, your message, and the page you sent it from
Why we use it
To reply to you and follow up on your request
Where
Booking a call (Cal.com)
What we collect
The details you enter in the booking form
Why we use it
To schedule and hold the call
Where
Pinnacle Data estimate and questionnaire (data.hqpinnacle.co)
What we collect
Company details, team size, years in operation, industry, tools used and approximate data volumes; for personal questionnaire links, the progress and timing of your visits
Why we use it
To assess whether your company's data could be licensed and to prepare an offer
Where
Pinnacle Data Discovery portal (data.hqpinnacle.co/discover)
What we collect
Your name, work email, company, company domain, notes, and storage and user-count figures. See Google user data below
Why we use it
To review your submission and respond to you
Where
Partner portal (partners.hqpinnacle.co)
What we collect
Account email, name, enrollment, training progress, portal activity and payment status
Why we use it
To provide the invite-only partner program
Where
Website analytics, only if you accept cookies
What we collect
Pages visited, page titles, approximate location and device information, via Google Analytics
Why we use it
To understand how the site is used and improve it

We do not sell personal information, and we do not use it for targeted advertising. We do not make decisions about you based solely on automated processing.

Google user data (Pinnacle Data Discovery)

When you click "Continue with Google" on https://data.hqpinnacle.co/discover, you can let Pinnacle Data Discovery read a small set of figures from your organization's Google Workspace account. This section explains exactly what we access and how we handle it.

What we access. We request three permissions: your basic sign-in identity (openid), your Google Account email address (email), and read-only access to your organization's Google Workspace usage reports (https://www.googleapis.com/auth/admin.reports.usage.readonly). With them we read only your email address, your organization's domain, and, from the usage report for one recent date, the number of user accounts and the storage used by Gmail, Google Drive, shared drives and in total. We do not read, open, copy or download any email, file, document, calendar entry, contact or other content, and these permissions do not allow it.

How we use it. The figures pre-fill the intake form on the same page so you don't have to find them in the Google Admin console. You can edit or remove any figure before sending. If you leave the page without clicking "Send to Pinnacle", nothing is sent to us. Pinnacle uses submitted figures only to review your submission internally and respond to you.

How we store it. The Google access token stays in your browser's memory, is never sent to our servers, and is revoked as soon as the figures are read. When you click "Send to Pinnacle", we store the submitted form, including the figures, the report date and the email address of the Google account you connected, in a restricted Google Sheet in Pinnacle's Google Workspace account, accessible only to a small number of authorized Pinnacle staff. We keep submissions for 24 months and then delete them.

How we share it. We do not sell Google user data, use it for advertising, or share it with data buyers, AI labs or any other third party. Google hosts the Sheet as our processor. We disclose it only when required by law.

Artificial intelligence. We do not use Google user data, or anything derived from it, to develop, improve or train artificial intelligence or machine learning models, and we do not allow anyone else to.

Limited Use. Pinnacle Data Discovery's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your choices. Access ends automatically once the figures are read. You can also review or remove Pinnacle Data Discovery's access at any time at https://myaccount.google.com/permissions. To ask us to delete a submission, email privacy@hqpinnacle.co.

Who we share data with

We use the following service providers, which process personal information on our behalf:

Provider
Cloudflare
Purpose
Hosting and security for hqpinnacle.co, data.hqpinnacle.co and partners.hqpinnacle.co
Provider
Google (Workspace, Sheets, Apps Script, Analytics)
Purpose
Email, storage of Pinnacle Data Discovery portal submissions, and website analytics (only if you accept cookies)
Provider
HubSpot
Purpose
Receiving and managing contact form enquiries
Provider
Cal.com
Purpose
Scheduling calls
Provider
Neon
Purpose
Database and sign-in for the questionnaire and the partner portal
Provider
Airtable, Attio and Slack
Purpose
Internal tracking of questionnaire status and notifications to the Pinnacle team
Provider
Resend
Purpose
Sending sign-in and reminder emails for the partner portal
Provider
Stripe
Purpose
Payments in the partner portal

We may also disclose personal information to professional advisers, to a buyer or successor in a corporate transaction under confidentiality obligations, or where the law requires it.

How long we keep data

  • Pinnacle Data Discovery portal submissions: 24 months from submission, then deleted.
  • Contact form enquiries, questionnaire answers and partner portal records: for as long as needed to handle your request or our relationship with you, and then as required for legal, accounting or dispute-resolution purposes.
  • Analytics data: according to the retention setting of our Google Analytics property.

Your rights and choices

You can ask us to tell you what personal information we hold about you, to correct it, or to delete it. You can withdraw your cookie consent at any time with the "Cookie settings" link in the footer. Depending on the US state you live in, you may have additional rights under state privacy law.

To make a request, email privacy@hqpinnacle.co with "Privacy request" in the subject line and tell us what you would like us to do. We may need to confirm your identity first. We reply within one month.

Visitors in the EU and UK

If you are in the European Economic Area or the United Kingdom, the EU General Data Protection Regulation (GDPR) or the UK GDPR gives you the following additional information and rights. Pinnacle HQ, Inc. is the controller of your personal information.

Legal bases

  • Contact form, call bookings, the Pinnacle Data estimate and questionnaire, and the Pinnacle Data Discovery portal: steps you ask us to take before entering into a contract (Article 6(1)(b)) and our legitimate interest in responding to business enquiries (Article 6(1)(f)).
  • Partner portal: performance of a contract (Article 6(1)(b)) and legal obligations such as accounting (Article 6(1)(c)).
  • Google Analytics and the Cal.com calendar: your consent (Article 6(1)(a)), which you can withdraw at any time.

Transfers to the United States

Pinnacle is based in the United States, and so are several of our providers, so your personal information is transferred to and processed in the United States. For these transfers we rely on our providers' safeguards: their certification under the EU-U.S. Data Privacy Framework (and its UK extension), or the European Commission's Standard Contractual Clauses (with the UK addendum). You can ask us for more information about these safeguards at privacy@hqpinnacle.co.

Your rights

You have the right to access your personal information, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given. Make a request by emailing privacy@hqpinnacle.co. We reply within one month.

Complaints

You have the right to complain to the data protection authority where you live or work. In the UK that is the Information Commissioner's Office. We would appreciate the chance to address your concern first, so please contact us at privacy@hqpinnacle.co.

Cookies and similar technologies

On hqpinnacle.co we use only the technologies listed below. Optional cookies are set only after you click "Accept" in the cookie banner, and you can change your choice at any time with Cookie settings.

Name
pinnacle-cookie-consent
Set by
hqpinnacle.co (browser local storage)
Purpose
Remembers your cookie choice
When
When you click Accept or Reject
Duration
Until you clear site data
Name
theme
Set by
hqpinnacle.co (browser local storage)
Purpose
Remembers light or dark mode
When
When you switch the theme
Duration
Until you clear site data
Name
_ga
Set by
Google Analytics, on hqpinnacle.co
Purpose
Distinguishes visitors for analytics
When
Only after you accept
Duration
Up to 2 years (most browsers cap it at 400 days)
Name
_ga_<container-id>
Set by
Google Analytics, on hqpinnacle.co (on our site: _ga_HKBWWK3THL)
Purpose
Keeps the analytics session
When
Only after you accept
Duration
Up to 2 years (most browsers cap it at 400 days)
Name
__cf_bm
Set by
Cal.com (cal.com)
Purpose
Bot protection for the booking calendar
When
Only after you accept, or click to load the calendar
Duration
30 minutes

Some pages also load map tiles from OpenStreetMap and images from Unsplash and Hunter. These providers receive your IP address when the image loads, but they do not set cookies on hqpinnacle.co.

data.hqpinnacle.co sets no cookies. It keeps form drafts in your browser's session or local storage so that you do not lose your answers. The Pinnacle Data Discovery portal keeps the Google access token only in the page's memory.

Security

Our sites are served over encrypted HTTPS connections, access to personal information is limited to the people who need it, and the Pinnacle Data Discovery portal never stores Google access tokens. No system is completely secure, so please contact us straight away at privacy@hqpinnacle.co if you believe your information has been put at risk.

Children

Our sites are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We will update the date at the top of this page whenever we change this policy, and we will tell you directly about significant changes where we can.

Contact

Pinnacle HQ, Inc.
131 Continental Dr, Newark, DE 19713, USA
Privacy: privacy@hqpinnacle.co

Back to the homepage

Get your free assessment