Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including when you create an account, purchase a subscription, connect third-party services, or use our platform. This may include:

• Name and email address (via Google Sign-In)
• Payment information (processed securely by LemonSqueezy)
• Blog URLs you submit for pin generation
• Generated pin data (titles, descriptions, keywords)
• Usage statistics (pins generated, remaining balance)
• Device and browser information
• IP address and location data
• Pinterest account username and OAuth tokens (when you connect your Pinterest account)
• Pinterest pin performance analytics such as impressions, saves, and clicks (for pins published through our service)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage subscriptions
• Generate Pinterest-optimized content using AI
• Track your monthly usage limits and pin generation
• Publish pins to Pinterest on your behalf (when you connect your account and authorize publishing)
• Display your Pinterest analytics and pin performance data within your dashboard
• Fetch trending keyword data from Pinterest to optimize your pin content during generation
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve our service
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations

3. Authentication & Account Data

If you use a license key instead of Google Sign-In, we store your email address and license key to manage your subscription and usage limits.

4. Pinterest Data

PinsMachine offers an optional Pinterest integration that allows you to connect your Pinterest account, publish pins directly, and view performance analytics. This section explains how we handle data from Pinterest ("Pinterest Data") in compliance with Pinterest's Developer and API Terms of Service.

4.1 Pinterest Data We Store

When you connect your Pinterest account, we store the following in our secure database:

• OAuth tokens (access token and refresh token) — required to publish pins and fetch analytics on your behalf
• Pinterest username — displayed in your dashboard to confirm which account is connected
• Pin IDs — the unique identifiers returned by Pinterest after a pin is published through our service, used to track publish status and fetch analytics
• Pin performance analytics — impressions, saves, and clicks for pins published through PinsMachine, collected from Pinterest's API. This constitutes campaign analytics information related to your own account.

4.2 Pinterest Data We Access but Do Not Store

The following Pinterest Data is accessed transiently during your session and is not persisted to any database or file:

• Board names, descriptions, and details — fetched in real-time so you can select where to publish pins
• Account-level analytics — KPIs such as total impressions, clicks, and saves, fetched on-demand when you view your analytics dashboard
• Pin images and metadata — fetched from Pinterest to display your top-performing pins in the dashboard
• Trending keywords — fetched on-demand from Pinterest's Trends API during pin generation to optimize your content. Trending data is processed in-memory and not permanently stored.

4.3 How We Use Pinterest Data

• To publish pins to your Pinterest boards on your behalf, only when you explicitly initiate or schedule a publish action
• To display your pin performance analytics within your PinsMachine dashboard
• To refresh expired OAuth tokens so you remain connected without re-authorizing
• To fetch trending keywords that improve the SEO quality of your generated pin content

4.4 What We Do NOT Do with Pinterest Data

4.5 Pinterest Data Retention & Deletion

• OAuth tokens: Retained while your Pinterest account is connected. Immediately deleted when you disconnect your Pinterest account from PinsMachine.
• Pinterest username: Deleted upon disconnection of your Pinterest account.
• Pin performance analytics: Retained for up to 90 days for your dashboard reporting, then automatically deleted.
• Pin IDs: Retained with your scheduled pin history. Deleted when you delete pins from your queue or upon account deletion.
• Trending keywords: Processed in-memory only and not stored beyond the active request.

You may disconnect your Pinterest account at any time from your PinsMachine dashboard. Upon disconnection, all stored OAuth tokens and Pinterest account identifiers are permanently deleted from our database. We will also delete Pinterest Data upon request from Pinterest.

5. AI-Generated Content

When you use our service, we process your blog URLs through AI services to:

• Extract content and analyze your blog posts
• Generate SEO-optimized titles and descriptions
• Extract relevant keywords
• Create AI-generated Pinterest pin images (paid plans only)

Your blog URLs and extracted content are processed temporarily and are not permanently stored after pin generation is complete. Generated pins, titles, and descriptions are delivered to you via CSV download. No Pinterest Data is sent to AI model providers.

6. Data Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction:

• All data transmission is encrypted using SSL/TLS
• Payment information is processed securely by LemonSqueezy (PCI-DSS compliant)
• We never store your credit card details
• Pinterest OAuth tokens are stored in a secured database with Row Level Security (RLS) enabled, accessible only by our backend services
• Database access is restricted and monitored
• Regular security audits and updates

7. Third-Party Services

We use the following third-party services:

• Google OAuth: For secure user authentication
• Pinterest API: For optional account connection, pin publishing, board management, pin analytics, and trending keyword retrieval (subject to Pinterest's Developer and API Terms of Service)
• AI Text Generation Providers: For AI-powered pin title, description, and keyword generation. Your blog content is sent to these providers for processing; no Pinterest Data is shared.
• AI Image Generation Providers: For creating AI-generated Pinterest pin images. Only text prompts derived from your blog content are sent; no personal data or Pinterest Data is shared.
• LemonSqueezy: For secure payment processing and subscription management
• Supabase: For secure database hosting
• Vercel: For website hosting and content delivery
• Resend: For transactional email delivery

These services have their own privacy policies governing how they handle data. We recommend reviewing their policies. We only share the minimum data necessary for each service to function. Pinterest Data is not shared with any of the AI providers listed above.

8. Data Retention

We retain different types of data for different periods:

• Account Information: Retained while your account is active and for 90 days after deletion
• Blog URLs: Processed in real-time and not permanently stored
• Generated Content: Delivered via CSV download and not stored on our servers
• Usage Statistics: Retained for 12 months for billing and analytics
• Payment Records: Retained for 7 years for tax and legal compliance
• Support Communications: Retained for 2 years
• Pinterest OAuth Tokens: Retained while your Pinterest account is connected; deleted immediately upon disconnection
• Pinterest Pin Analytics: Retained for up to 90 days; automatically purged thereafter
• Pinterest Trending Data: Processed in-memory during pin generation only; not stored permanently

9. Data Breach Notification

In the event of a data breach that affects your personal data or Pinterest Data stored by PinsMachine, we will:

• Notify affected users via email within 72 hours of becoming aware of the breach
• Notify Pinterest promptly if the breach involves Pinterest Data, in accordance with Pinterest's Developer Terms of Service
• Notify relevant supervisory authorities as required by applicable data protection laws (including GDPR where applicable)
• Take immediate steps to contain, assess, and remediate the breach
• Provide a written description of the nature of the breach, the data affected, and the corrective measures taken upon request

10. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements). This includes all Pinterest Data we hold about you.
• Export: Request a machine-readable copy of your data
• Opt-out: Unsubscribe from marketing communications
• Object: Object to processing of your data for certain purposes
• Restrict: Request restriction of processing in certain circumstances
• Disconnect: Disconnect your Pinterest account at any time, which will delete all Pinterest OAuth tokens and account identifiers from our system

To exercise any of these rights, please contact us at support@pinsmachine.com

11. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you signed in across sessions
• Remember your preferences (dark mode, settings)
• Analyze how you use our service
• Prevent fraud and abuse

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use all features of our service.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy. Where Pinterest Data originates from users in designated jurisdictions (such as the European Economic Area), we apply heightened data protection standards in accordance with Pinterest's Developer Terms.

13. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

14. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). This includes the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of your personal information. We do not sell your personal information.

15. GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR). We process your data based on your consent, contractual necessity, legal obligations, or our legitimate interests. You have the right to withdraw consent, lodge a complaint with a supervisory authority, and exercise other GDPR rights described in Section 10. Where we store Pinterest Data that constitutes personal data under GDPR, we will delete such data promptly upon your request or upon Pinterest's request, and will provide written certification of deletion upon request.

16. Pinterest Developer Terms Compliance

Our use of Pinterest's API and platform services is governed by Pinterest's Developer and API Terms of Service and Developer Guidelines. In accordance with these terms:

• We access Pinterest Data solely through Pinterest's official API and authorized means
• We store only the minimum Pinterest Data necessary to provide our services, limited to OAuth tokens, your Pinterest username, published pin IDs, and campaign analytics for your own account
• We do not use Pinterest Data for AI or machine learning model development
• We do not transfer, sell, or disclose Pinterest Data to third parties
• We will delete Pinterest Data upon Pinterest's request and will provide written certification of compliance
• We comply with all applicable usage limits and rate restrictions set by Pinterest

For more information about Pinterest's data practices, please review Pinterest's Developer Guidelines and Pinterest's Developer Terms of Service.

17. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email. Your continued use of the service after changes constitutes acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: