Who operates this site
This PinPilot installation is operated by PinPilot. Contact details are listed on the Contact page. The operator chooses the hosting location, service configuration and any commercial arrangements. This policy describes the supplied application; the operator is responsible for keeping it accurate for this installation.
Account and sign-in information
We store your name, email, timezone, verification status, hashed password and workspace membership. Optional Google sign-in adds a Google account identifier, verified email and connection date. Google access tokens are used during sign-in and are not saved as a continuing Google authorization. We do not receive your Google or Pinterest password.
Content you provide
Your workspace stores drafts, uploaded images and videos, article URLs and extracted material, keywords, brand kits, templates, scheduling preferences and publication records. Only upload or import content you are entitled to use. Workspace members can access content according to their role.
Pinterest connections
Official OAuth connects a Pinterest account. Access and refresh tokens are encrypted in the application database. Necessary account, board and publication identifiers are stored for your workflow. Supported board and analytics information is requested from Pinterest when needed. Disconnecting local access does not remove Pins already published to Pinterest.
Why information is used
Information is used to create and secure your account, organize workspaces, store and deliver your content, publish your approved Pins, show usage, troubleshoot failures and respond to requests. Depending on applicable law, the operator relies on providing the requested service, legitimate security and administrative interests, legal obligations or consent where required.
Service providers
Hosting and email providers process information needed to run the installation and deliver messages. Choosing Google sign-in sends you to Google. Pinterest receives content and media necessary to publish approved Pins. When AI is enabled and you request generation, the relevant prompt, keywords or source text is sent to OpenAI. Each provider has its own privacy practices. No advertising trackers are included in the supplied app.
Retention
Account and workspace content normally remains until you or an authorized member deletes it. With scheduled maintenance running, API request logs and failed-job records are removed after 30 days, and activity logs after 90 days. Expired invitations and old OAuth requests are cleaned up too. Backup copies and hosting logs follow the operator’s own retention schedule; ask the operator for those details.
Security measures
The app uses hashed passwords, encrypted provider credentials, CSRF protection, access checks and optional authenticator two-factor authentication. Sensitive account actions require password confirmation. The operator must maintain HTTPS, the application key, private storage, current dependencies and protected backups. No system can promise absolute security.
Cookies and browser storage
Essential cookies maintain your session, protect forms and optionally remember sign-in. The supplied application does not add marketing identifiers to local browser storage. Details are on the Cookie Policy page. Blocking required cookies can prevent account access.
Your choices and requests
Update your profile in Settings, disconnect Pinterest in Accounts, connect or disconnect Google in Settings, or delete your account. Contact the operator for access, correction, export or other requests available under applicable law. Identity verification may be needed before releasing or deleting information. Google-only accounts can set a password through the password reset email.
Location and third-party services
Processing locations depend on the operator’s hosting and selected providers. This application does not promise a particular country of storage. Ask the operator about international processing and any safeguards that apply to your account. Pinterest remains responsible for content and account data held on Pinterest.
Changes and contact
The operator may update this policy when service configuration or practices change. The current version is displayed here. Contact the operator with privacy questions; include enough information to locate your account, and never send passwords or recovery codes.