Privacy Policy

For Nothing Ventures LLC (“we,” “us,” or “our”) operates Pano (accessible at panoit.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By accessing or using Pano, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the service.

Account Information

When you create a Pano account, we collect information you provide directly:

• Email address
• Name
• Username
• Password (stored securely using one-way hashing)
• Profile information you choose to add (bio, city, profile picture)

Content You Create

We collect and store the content you create on Pano, including:

• Bookmarks (URLs you save, along with titles, descriptions, and tags you add)
• Shelves (collections you create, including names, descriptions, colors, and visibility settings)
• Social interactions (accounts you follow)

Automatically Collected Information

When you use Pano, we automatically collect certain information:

• Device information (browser type, operating system)
• IP address
• Pages visited and features used within Pano
• Date and time of your visits
• Referring URL

Metadata Extraction

When you save a URL to Pano, our background services automatically fetch publicly available metadata from that URL, including the page title, description, and Open Graph image. This metadata is stored to improve how your bookmarks are displayed. We do not access any content behind authentication walls or paywalls.

We use the information we collect to:

• Provide, maintain, and improve the Pano service
• Create and manage your account
• Display your bookmarks and shelves as you have configured them
• Enable sharing features for shelves you make public or link-accessible
• Send service-related communications (account verification, security alerts, important updates)
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

We do not sell your personal information. We do not use your bookmarks or shelves to build advertising profiles.

Pano uses cookies and similar technologies for:

• Authentication cookies — essential cookies that keep you signed in and maintain your session. These are strictly necessary for the service to function.
• Analytics — we use PostHog for product analytics to understand how people use Pano. PostHog collects anonymized usage data including page views, feature interactions, and performance metrics.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using Pano's authenticated features.

We use the following third-party services to operate Pano. Each service processes data as necessary to provide its specific function:

• Vercel — hosting and content delivery. Vercel processes request data (IP addresses, headers) to serve the application. See Vercel's Privacy Policy.
• Neon — PostgreSQL database hosting. All user data, bookmarks, and shelves are stored in Neon-hosted databases. See Neon's Privacy Policy.
• PostHog — product analytics. Collects anonymized usage data to help us understand and improve the product. See PostHog's Privacy Policy.
• Sentry — error monitoring. Collects error reports and performance data to help us identify and fix bugs. May include request metadata. See Sentry's Privacy Policy.
• Upstash — Redis caching and rate limiting. Processes request metadata for rate limiting and caching purposes. See Upstash's Privacy Policy.
• Inngest — background job processing. Handles asynchronous tasks such as metadata extraction for saved URLs. See Inngest's Privacy Policy.

We retain your personal information for as long as your account is active or as needed to provide you with the service. Specifically:

• Account data — retained until you delete your account.
• Bookmarks and shelves — retained until you delete them individually or delete your account.
• Server logs — automatically purged after 30 days.
• Analytics data — retained in anonymized form consistent with PostHog's retention policies.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain certain data.

Depending on your location, you may have certain rights regarding your personal information:

All Users

• Access — you can access all your data through the Pano application at any time. Your bookmarks, shelves, and profile information are always visible to you.
• Correction — you can update your profile information, bookmarks, and shelves at any time through the application.
• Deletion — you can delete individual bookmarks, shelves, or your entire account. Account deletion removes all associated data.
• Export — you can request an export of your data by contacting us at hello@panoit.com.

GDPR (European Economic Area)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is: (a) performance of a contract (providing the service you signed up for), (b) legitimate interest (improving our service, preventing abuse), and (c) consent (where specifically requested, such as for analytics).

CCPA (California)

If you are a California resident, the California Consumer Privacy Act provides you with additional rights:

• Right to know — you can request details about the personal information we have collected about you in the preceding 12 months.
• Right to delete — you can request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.
• No sale of personal information — we do not sell personal information. We have not sold personal information in the preceding 12 months.

To exercise any of these rights, contact us at hello@panoit.com. We will respond to verified requests within 30 days (45 days for CCPA requests).

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest in our database
• Secure password hashing (passwords are never stored in plain text)
• Regular security monitoring and error tracking
• Rate limiting to prevent abuse
• Access controls limiting who can access production systems

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Pano is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@panoit.com.

Pano is operated from the United States. If you are accessing the service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using Pano, you consent to the transfer of your information to the United States and other jurisdictions as described in this policy. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. If we make material changes, we will notify you through the service or by email.

Your continued use of Pano after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: