Privacy Policy

pingfusi connects AI agents to real human reviewers: you (or your AI agent, through our MCP server) file something for review — a page, a build, a video, a question — and an independent human reviewer answers it. The reviewer side of the service is the PingHumans reviewer app; both surfaces are one service and one policy. To operate it we collect your email + Clerk profile, the review requests you file, the responses reviewers submit, and the credit and earnings ledgers. Review requests are shown to human reviewers — that's the product — so never include secrets in one. Reviewers never see who asked, and askers never see who answered. We don't sell your data. Delete your account anytime by emailing support@pinghumans.com.

• Account info from Clerk when you sign in (email address, optional display name, profile photo if you provide one). We use Clerk as our identity provider.
• If you file reviews (directly or through an AI client): the content of each review request — the URL being reviewed, your questions and steps, verdict options, and any screenshots or video you attach — plus your credit balance, your Stripe Customer ID (created lazily on first deposit), and a record of each deposit (Stripe payment intent ID, amount, date).
• If you answer reviews: the profile tags you set yourself (e.g. designer, korean) to determine which pings reach you, the responses you submit (verdicts, notes, drawn annotations, screenshots taken in the review surface), a response time measurement used as an anti-spam signal, and an earnings ledger recording each accepted answer and its credit toward your future cash-out.
• API tokensfor AI clients (Claude, Cursor, ChatGPT, etc.) you connect to your account via the MCP interface. Stored as a sha256 hash of the token plus a client label (e.g. "Claude Code"). You can revoke these anytime from your dashboard.
• Push subscriptions (web or mobile push tokens) if you opt in to notifications.
• Server logs covering API requests, including your IP address and user agent, retained for operational and abuse-prevention purposes.

• We do not use third-party analytics, advertising trackers, or fingerprinting libraries.
• We do not collect or store your password — Clerk handles authentication.
• We do not read your AI conversations. Our MCP server receives only the tool calls your AI client sends it — the review requests themselves — never the surrounding chat.
• We do not request access to your phone contacts, photos, location, microphone, or camera.

Showing your review request to a real person is the entire product, so be deliberate about what you file. When you (or your AI agent) file a review, the request's content — the URL, the questions and steps, and any screenshots or video — is shown to independent human reviewers so they can answer it. Reviewers see the request, never your identity: no name, email, or account details travel with it. File only URLs and content you're comfortable showing a third party, and never put credentials, API keys, or other secrets inside a review request.

The anonymity holds in the other direction too. Askers see only the content of your response— the verdict, notes, annotations, and screenshots — never your name, email, profile, or any stable identifier. We deliberately strip the reviewer identity from the data returned to askers via the MCP interface. If we ever change this we'll update this policy and notify you in-app before doing so.

• To operate the service: route review requests to reviewers, deduct credits, credit earnings.
• To pay reviewers when they reach the cash-out threshold.
• To prevent abuse (rate-limit spam, detect duplicate submissions).
• To send you push notifications about new pings, when you've opted in.

We use these third-party services to run pingfusi. Each receives only what's needed for its role:

• Clerk (clerk.com) — authentication. Receives your sign-in info.
• Supabase (supabase.com) — database + Realtime. Receives your profile, review requests, responses, and ledger data.
• Stripe (stripe.com) — payments, only if you deposit credits. Receives payment-card details (Stripe processes them; we never see your full card number).
• Vercel (vercel.com) — hosting. Receives request logs (IP, user agent, URL).
• Apple Push Notification Service, if you opt in — receives your device token.

Independent human reviewers see the content of review requests, as described above — that is the service working as designed, not a data sale. We do not sell your personal data to advertisers, brokers, or any other third parties.

While your account is active. If you delete your account by emailing support@pinghumans.com, we delete your profile, review requests, responses, push subscriptions, and tokens within 30 days. We retain the ledger of deposits and earnings for up to 7 years for tax / legal compliance.

• Access — email support@pinghumans.com to receive a copy of your data.
• Correction — edit your display name and tags directly in the app or web dashboard.
• Deletion — email support@pinghumans.com to request deletion. We'll confirm within 30 days.
• Revoke AI client tokens — visit the Active Sessions list on your dashboard and click Revoke.
• Opt out of push — toggle off in your iOS or browser settings.

California, EU/UK, and similar-jurisdiction users have additional rights under CCPA and GDPR — same email address for any of these requests.

The service is not directed at children under 13. If you believe a child under 13 has signed up, email support@pinghumans.com and we'll delete the account.

We'll post any material change here and update the date at the top. Continued use of the service after a change constitutes acceptance. We'll also notify registered users by email or in-app for significant changes.

Questions about your data, this policy, or anything related to privacy: support@pinghumans.com.