Privacy Policy

1. Information We Collect

1.1 Information from Pinterest OAuth

When you sign in with Pinterest, we request the following permissions (scopes):

• user_accounts:read — Your Pinterest username, profile image, account type, and follower count.
• boards:read & boards:write — The names and details of your Pinterest boards, and the ability to create or update boards on your behalf.
• pins:read & pins:write — The ability to read your existing pins and create or update pins on your behalf.

We store your Pinterest username, profile image URL, and follower count. We also store your OAuth access token and refresh token in encrypted form (see Section 4).

1.2 Account Information

We store your email address if provided by Pinterest during authentication. We also store a unique user ID generated by our system, your timezone preference, and account creation date.

1.3 User Profile Information

You may optionally provide personal brand information to improve AI caption quality. This includes:

• An “About You” text description (up to 1,000 characters)
• Your content interests (selected from predefined Pinterest categories)
• Favorite Pinterest creators (usernames you enter)
• Preferred content structure types (e.g., how-to, listicle, infographic)

All of these fields are optional. You can update or delete this information at any time from the User Info page.

1.4 Pin and Scheduling Data

When you create pins through PinGrow, we store the pin draft data (title, description, hashtags, destination URL, board selection), uploaded images, scheduling timestamps, and publishing status.

1.5 Analytics Data

We collect performance metrics for your published pins from the Pinterest API, including impressions, saves (repins), and outbound clicks. Analytics data is retained for up to 90 days from collection.

1.6 Website Usage

We measure how our own website is used, ourselves, without sending it to a third-party analytics company. For each visit we record the pages viewed, how long each page was on screen, the site you arrived from (its address only, never the full link), whether you are on a phone, tablet or computer, and your country.

Your country is worked out from your IP address at the moment your visit begins, using a lookup table held on our own servers. The address itself is never written down: it is turned into a two-letter country code and discarded in the same step, and no part of PinGrow stores or can recover it.

Visits are linked together by a randomly generated identifier in a first-party cookie, which lets us tell one person's two visits from two people's one visit. It is a random value and nothing else — it carries no information about you, and it is not shared with anyone. If you sign in, the visit is associated with your account so that we can understand how our customers use the product. This record is deleted after 180 days, and the association with your account is removed if you delete your account.

1.7 Cookies and Session Data

We use a session cookie to keep you signed in. Our session is managed via a JSON Web Token (JWT) stored in a secure, HTTP-only cookie.

If you reach PinGrow from an advertisement, we store the advertising parameters from that link (such as a Google click identifier and any utm_ values) in a first-party cookie for up to 90 days, and record them against your account if you sign up. This tells us which advertising brought people to PinGrow. It contains no personal information beyond the identifiers already present in the link you clicked.

We also run the Google Ads tag (gtag.js) on our public pages, which sets Google advertising cookies and reports to Google when an account is created, so that we can measure our advertising. That report includes an opaque account identifier used only to avoid counting the same signup twice; it does not include your name, email address or Pinterest data. Google's handling of this data is governed by the Google Privacy Policy. In the EEA, the UK and Switzerland these cookies are switched off until you accept them, and we ask before setting any of them. Anywhere else you can prevent them by blocking third-party cookies or using an ad or tracker blocker. PinGrow itself works normally either way.

When a subscription is paid for, we send Google the click identifier from the original advertisement together with the amount and currency of that payment, so we can tell which advertising pays for itself. No name, email address or Pinterest content is included.

1.8 Subscription and Billing Data

If you subscribe to a paid plan, we store your current plan, your subscription status, and the customer, subscription, and product variant identifiers issued by our payment processor, LemonSqueezy. We also store usage counts (pins created, AI generations, image searches, and keyword searches) so we can apply your plan's limits.

We do not receive or store your payment card number or other payment method details. Those are collected and held by LemonSqueezy. See Section 3.4.

2. How We Use Your Information

• Authentication & access: To sign you in and maintain your session via Pinterest OAuth.
• Pin creation & scheduling: To create, schedule, and publish pins to your Pinterest boards on your behalf.
• AI caption generation: Your user profile information, board list, prompts, and uploaded images are sent to OpenRouter to generate pin titles, descriptions, hashtags, and board suggestions tailored to your brand voice. See Section 3.2 for details.
• Image search: To search stock photography on your behalf, your search terms are sent to Unsplash. See Section 3.3.
• Board sync: To fetch and display your Pinterest boards for pin assignment and board suggestions.
• Analytics: To fetch and display pin performance metrics so you can track your Pinterest growth.
• Billing and subscriptions: To take payment, apply the correct plan and usage limits to your account, and keep your subscription status up to date. See Section 3.4.
• Token management: To securely store and automatically refresh your Pinterest access token before it expires, so you stay connected without manual re-authorization.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Services

3.1 Pinterest API

PinGrow integrates with the Pinterest API v5 to authenticate you, read your boards and pins, create and publish pins, and fetch analytics. Your use of Pinterest is also governed by Pinterest's Privacy Policy and Terms of Service.

3.2 OpenRouter (AI Provider)

All of PinGrow's AI features run through OpenRouter. OpenRouter processes this data on our behalf and routes it to the underlying model, which we may change from time to time to improve quality, speed or cost. PinGrow does not generate or edit images; the only image processing is reading an image you provide in order to write a caption for it. When you request AI-generated content, the following data may be sent to OpenRouter:

• Your topic or prompt text
• Uploaded images, stock images you select, and — when you use the AI agent — stock images the Service selects automatically on your behalf, so the model can describe them when writing a caption
• Your user profile information (if provided) for voice/style matching
• Your board names (for board suggestion context)

We do not send your Pinterest access tokens, email, password, or billing details to OpenRouter. OpenRouter's handling of the data it receives is governed by its own privacy policy and terms, as is the handling by the model provider it routes your request to. OpenRouter publishes its privacy policy at openrouter.ai/privacy.

3.3 Unsplash (Image Search)

Stock image search is powered by Unsplash. When you run an image search, we send your search terms to the Unsplash API from our server using our own API key. We do not send your name, email, Pinterest account details, or user ID to Unsplash.

Image previews and the images you select are served directly from Unsplash's servers to your browser, so Unsplash may receive your IP address and browser information when those images load. Unsplash's use of that data is governed by Unsplash's Privacy Policy.

3.4 LemonSqueezy (Payments)

Paid subscriptions are sold and processed by LemonSqueezy, which acts as the merchant of record for your purchase. When you subscribe, you are taken to a checkout page hosted by LemonSqueezy. LemonSqueezy collects and processes your billing information directly, which includes your name, billing email address, payment method details (such as your card details), billing address, and any tax information required for your country.

We send LemonSqueezy your PinGrow user ID (and your email address, if we have one from Pinterest) so that a payment can be matched to your account. In return we receive and store the identifiers and status described in Section 1.8. We never receive your full payment card details.

LemonSqueezy's handling of your billing data is governed by LemonSqueezy's Privacy Policy.

3.5 Hosting and Database Providers

PinGrow's application servers run on Railway, and our PostgreSQL database is hosted by Neon. Neon stores all of the data described in Section 1, including your encrypted Pinterest tokens, your profile information, and your pin drafts. Railway processes that data in transit while the application is running and stores our server logs. Both act as processors on our behalf and store data on infrastructure they operate.

4. Data Security

We take reasonable measures to protect your information:

• Token encryption: Your Pinterest OAuth access token and refresh token are encrypted at rest using AES-256-GCM encryption before being stored in our database.
• Session security: Sessions are managed via signed, HTTP-only JWTs. Cookies are not accessible to client-side JavaScript.
• HTTPS: All data in transit is encrypted via HTTPS.
• Secure API routes: All API endpoints require authentication. Cron jobs are secured with a secret token.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Account data: Retained as long as your account is active. When you delete your account, all associated data is permanently deleted from our database.
• Pin drafts: Retained until you delete them or delete your account.
• Pin analytics: Collected and retained for up to 90 days from the date of collection.
• Website usage records: Retained for 180 days and then deleted automatically. Deleting your account removes the link between these records and you, leaving only the anonymous visit.
• Uploaded images: Stored while associated pin drafts exist. Deleted when the pin draft is removed or your account is deleted.
• Subscription records: Your plan, subscription status, and LemonSqueezy identifiers are retained while your account exists. LemonSqueezy keeps its own record of your transactions for as long as its accounting and tax obligations require, independently of your PinGrow account.

6. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can view your profile information, boards, pin drafts, and analytics at any time within the app.
• Update: You can update your user profile information, timezone, and other settings at any time.
• Delete: You can delete individual pin drafts. To delete your entire account and all associated data, contact us (see Section 10).
• Revoke Pinterest access: You can revoke PinGrow's access to your Pinterest account at any time through your Pinterest security settings. This will prevent PinGrow from accessing your Pinterest data going forward.
• Sign out: You can sign out at any time, which ends your session. Your data is retained until you request deletion.

7. Children's Privacy

PinGrow is not intended for use by anyone under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

8. International Data Transfers

Your data may be processed and stored in countries other than your own. By using PinGrow, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, want to request account deletion, or need to exercise your data rights, please contact us at:

support@pingrow.app