Privacy Policy

Pinstark ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use Pinstark at pinstark.com (the "Service").

1. Information We Collect

Account Information: When you sign up, we collect your email address, name (optional), and authentication tokens from Google OAuth if applicable.

Pinterest Connection: If you connect your Pinterest account, we receive and store encrypted OAuth access and refresh tokens issued by Pinterest, along with your Pinterest user ID and username. We never receive, see, or store your Pinterest password. You can disconnect at any time from your account page, which deletes these tokens and revokes our access.

Usage Information: We log pin pack generations, including the product URLs you submit, the styles and strategies you select, and the outputs returned.

Payment Information: Payments are processed by Dodo Payments. We receive transaction confirmations but do not store full credit card or banking details.

Technical Information: We collect IP address, browser type, device information, referring URL, and timestamps. We also use product analytics that record user sessions — including page views, clicks, and navigation — to help us understand and improve the Service. Text you type into form fields is masked and is not captured in these recordings. This data is used for security, debugging, and analytics.

Cookies: We use essential cookies for authentication and session management, and optional cookies for analytics.

Communications: If you contact us, we retain your messages and any information you provide.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (account confirmations, receipts, support responses)
• Respond to inquiries and provide customer support
• Read your Pinterest boards and account information, and publish pins to your boards — only when you have connected your Pinterest account, and only at your direction
• Detect, prevent, and respond to fraud, abuse, or technical issues
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Third-Party Services

Pinstark relies on the following third-party services to operate. Your use of Pinstark may result in data being processed by these services:

• Supabase (Lovable Cloud) — database, authentication, file storage
• Anthropic — AI text generation (Claude models)
• Google Cloud — AI image generation (Gemini models)
• Pinterest — when you connect your Pinterest account via OAuth, we read your boards and account information and create pins on your behalf at your direction. We store encrypted access tokens only, never your Pinterest credentials.
• Dodo Payments — payment processing
• Resend — transactional email delivery
• Cloudflare — DNS and DDoS protection
• PostHog — product analytics and session recording
• Firecrawl — product page data extraction (processes the product URLs you submit)

Each of these services has its own privacy policy. We encourage you to review them.

4. Data Retention

Account data is retained while your account is active. Pin packs are retained per your subscription tier's library retention policy (7 days for Free, 15 days for Starter, 90 days for Pro, unlimited for Studio). If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Pinterest access tokens are deleted when you disconnect your Pinterest account or delete your Pinstark account.

5. Cookies

Essential cookies are required for the Service to function (authentication, session management). Optional cookies, when enabled, may be used for analytics to help us understand how the Service is used. You can control or clear cookies through your browser settings.

6. Your Rights

Depending on your location, you may have the following rights:

Under the EU General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

Under India's Digital Personal Data Protection Act (DPDP), 2023:

• Right to access information about your personal data
• Right to correction and erasure
• Right to grievance redressal
• Right to nominate

To exercise any of these rights, contact us at support@pinstark.com.

7. Children's Privacy

Pinstark is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us.

8. International Data Transfers

Pinstark operates from India, but our service providers may store data in the United States, European Union, or other jurisdictions. By using the Service, you consent to these international data transfers.

9. Security

We implement industry-standard security measures, including encryption in transit (HTTPS), encryption at rest for sensitive credentials such as third-party access tokens, access controls, and secure authentication. No system is 100% secure; we cannot guarantee absolute security but commit to notifying you of any data breach that materially affects your information, as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or by posting a notice on pinstark.com.

11. Contact

For privacy-related questions, contact support@pinstark.com.