Conversations with Pine
We process conversation content to carry out your tasks and generate summaries for follow-up work. Call summaries may be included in task context.
Security at Pine
Data security and responsible disclosure
Your privacy and data security are our top priorities. We protect your information at every step, commit to data minimization and purpose limitation, and welcome responsible disclosure of security vulnerabilities.
SOC 2GDPR
What we process and keep
Account information
Essential data such as your email, preferences, and timezone used to personalize the service.
Operational data
Service health and performance information used to operate and monitor Pine.
How we protect your data
In transit
TLS 1.3Data in transit is encrypted using TLS 1.3.
At rest
AES-256Data at rest is encrypted using AES-256.
During tasks
Purpose limitationWe process the data needed to carry out your tasks, including through the service providers listed in our subprocessor list.
Encryption and access controls
We limit data use to the purposes described in our Privacy Policy and restrict access. Our subprocessor list explains which providers process data to support Pine.
Compliance
SOC 2GDPR
SOC 2 work is in progress. Contact us about report availability and our current compliance status.
Request SOC 2 report
Subprocessors
Learn which service providers process data for Pine, why they process it, and where.
View subprocessor listIncident response
We investigate and contain security incidents. For personal data breaches subject to GDPR notification requirements, we notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware. We notify affected individuals without undue delay when required by applicable law.
Contact us
Learn how Pine uses your data, handles retention and deletion, and supports your data rights.
Explore the Trust Center
Security questions and vulnerability reports
security@19pine.aiPrivacy questions and data rights requests
privacy@19pine.aiProduct and account support
support@19pine.aiVulnerability Disclosure Program
Report a vulnerability
We will acknowledge receipt within 3 business days and aim to provide a substantive response within 10 business days.
How to report a vulnerability
If you believe you have found a security issue in Pine, please email our security team with enough detail for us to reproduce and validate the issue.
Please include
A clear description of the issue- Reproduction steps
- Proof-of-concept, if available
- Potential impact
Scope
- Pine web application: 19pine.ai and subdomains
- Pine mobile apps (iOS / Android)
- Pine APIs
- Authentication, authorization, account takeover, and PII exposure vulnerabilities
Out of scope
Social engineering, phishing, or physical attacks- Denial-of-service attacks
- Vulnerabilities in third-party services we integrate with
- Self-XSS or attacks requiring user-side manipulation without remote exploitation
- Findings from automated scanners without demonstrated impact
- Missing security headers without exploitable consequence
- Content spoofing without credible risk
- AI prompt injection from user-uploaded content, which is treated as user-level input by design
Safe harbor
If you make a good-faith effort to comply with this policy during your security research, we will consider your research to be authorized, we will work with you to understand and resolve the issue quickly, and we will not recommend or pursue legal action related to your research.
Good-faith means
- No data destruction
- No service disruption
- No accessing data beyond what is necessary to demonstrate the vulnerability
- No public disclosure until we have had a reasonable chance to remediate
Recognition
Pine does not currently operate a formal bug bounty program and cannot guarantee monetary rewards. For valid, impactful findings disclosed responsibly, we may offer the following at our discretion.
- Public acknowledgment on this page
- A LinkedIn recommendation from our team
- Pine swag
- At our discretion, a one-time goodwill payment
Security acknowledgments
We thank the following researchers for responsibly disclosing security issues to Pine.
No public acknowledgments yet. We will add researchers here after disclosure is closed and remediation is complete.