1. Who We Are

Pin Data Connect ("Pin Data Connect," "we," "us," or "our") is operated by Adrienne Pellegrino, doing business as Pin Data Connect. This Privacy Policy explains what information we collect through pindataconnect.com and our related services (the "Service"), how we use it, and the choices you have. If you have questions, contact us at support@pindataconnect.com.

2. Information We Collect

Account information. When you register, we collect your name, email address, and password. Passwords are hashed with bcrypt before storage - we never store or have access to your plain-text password.

Pinterest account information. If you connect a Pinterest Business account, Pinterest shares with us your Pinterest account ID, username, profile image, business account ID, and website URL, and issues us an OAuth access token and refresh token scoped to the permissions you approve on Pinterest's consent screen. These tokens are encrypted at rest (AES-256-GCM) before they are ever written to our database.

Billing information. Subscriptions are billed through Paddle.com, our payment processor and merchant of record (see Section 5). We never receive or store your full card number - we only store limited billing metadata Paddle sends us, such as your subscription status, plan, renewal date, and Paddle's internal subscription and customer identifiers.

Technical information. We log IP addresses and basic request metadata for security and troubleshooting, and we use a signed, HTTP-only session cookie (auth_token) to keep you logged in.

3. How We Use Your Information

• To create and authenticate your account and maintain your login session.
• To connect to the Pinterest API on your behalf and generate the product catalogs/feeds you configure.
• To process subscription billing, renewals, and cancellations through Paddle.
• To send transactional emails (e.g. password resets) via our email delivery provider.
• To detect, investigate, and prevent fraud, abuse, and security incidents.

We do not use your data for advertising, and the Service does not run third-party analytics or advertising trackers.

4. Your Pinterest Data, Specifically

We request only the Pinterest permissions needed to read your basic account/business details and manage product catalogs and feeds on your behalf. We do not access your personal Pinterest boards, pins, or messages beyond what those permissions allow, and we do not use your Pinterest data for any purpose other than operating the Service you've configured.

Your Pinterest access and refresh tokens are stored encrypted and are only decrypted in memory, server-side, at the moment an API call to Pinterest is required. You can revoke our access at any time from Settings → Pinterest Connection → Disconnect, which deletes your stored connection record and tokens from our database and (on a best-effort basis) asks Pinterest to revoke the token. You can also revoke access directly from your Pinterest account's Apps settings at any time.

5. Payment Processing & Paddle

Paddle.com acts as the merchant of record for all purchases made through Pin Data Connect. This means your purchase transaction (including your payment card details, billing address, and invoicing) is handled directly by Paddle under Paddle's own Privacy Policy and Buyer Terms, not by us. We only receive the limited subscription metadata described in Section 2 back from Paddle.

6. Cookies

We use a small number of strictly necessary, HTTP-only cookies: auth_token to keep you signed in, and a short-lived OAuth state cookie used only during the Pinterest connection flow to protect against cross-site request forgery. These cookies cannot be read by browser scripts and are not used for tracking or advertising. We do not use third-party advertising or analytics cookies.

7. Sharing Your Information

We do not sell or rent your personal information. We share data only with the service providers necessary to operate the Service:

• Pinterest - to authenticate your account and manage catalogs/feeds you configure.
• Paddle.com - to process subscription payments as merchant of record.
• Brevo (Sendinblue) - to deliver transactional emails such as password resets.

We may also disclose information if required by law, or to protect the rights, safety, or security of Pin Data Connect or our users.

8. Data Security

We employ industry-standard safeguards, including salted bcrypt password hashing, AES-256-GCM encryption of Pinterest tokens at rest, HMAC-signed and replay-protected verification of payment webhooks, HTTPS in transit, and HTTP-only/SameSite session cookies. No method of transmission or storage is 100% secure, but we work to protect your information using these measures.

9. Data Retention

We retain account and Pinterest connection data for as long as your account remains active. If you disconnect Pinterest, associated tokens are deleted immediately. If you request account deletion (Section 10), we delete your personal data within 30 days, except where we are required to retain limited billing records for tax, accounting, or legal compliance purposes.

10. Your Rights & Choices

You may access or correct your account information at any time by contacting us. You may disconnect your Pinterest account at any time from Settings. To request deletion of your account and associated personal data, or to request a copy of the data we hold about you, email support@pindataconnect.com from your account email address. We will respond within 30 days.

11. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe a child has provided us with personal information, contact us and we will delete it.

12. International Users

The Service is operated in the United States, and any information you provide is processed and stored in the United States. By using the Service, you consent to this transfer and processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date above when we do, and material changes will be communicated via email or an in-app notice.

14. Contact Us

Questions about this Privacy Policy or your data can be sent to support@pindataconnect.com.

Notice: Pin Data Connect is an independent service and is not affiliated with, endorsed by, or associated with Pinterest, Inc. or its affiliates.