Privacy Policy

Effective Date: April 18, 2026

This Privacy Policy explains how PinLaunchr ("PinLaunchr," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use http://pinlaunchr.com and our services for AI-powered Pinterest pin generation, scheduling, board management, analytics, and automation (the "Service").

PinLaunchr is based in the United States: PinLaunchr, 1209 Mountain Road Place Northeast, Albuquerque, NM 87110, United States.

If you have questions, contact us at contact@pinlaunchr.com (legal/privacy) or help@pinlaunchr.com (support).

---

Table of Contents

1. Information We Collect
2. How We Use Information
3. Legal Bases for Processing (GDPR)
4. Pinterest Data
5. AI Processing
6. How We Share Information
7. Cookies and Analytics
8. Data Retention
9. Security
10. International Data Transfers
11. Your Rights (GDPR/EEA & UK)
12. Your Rights (California — CCPA/CPRA)
13. Children's Privacy
14. Changes to This Policy
15. Contact Us

---

1. Information We Collect

Account information. Name, email address, profile image, and authentication identifiers when you sign up via Google, Apple, or Pinterest (handled through Google Firebase Authentication). We do not receive or store your social-login passwords.

Billing information. Subscription plan, credit balance, transaction history, and billing status. Payments are processed by Stripe; we do not store full payment card numbers.

Content you provide. Website URLs, article text, prompts, uploaded images, generated pins, titles, descriptions, board names, scheduling preferences, and workspace/site information.

Pinterest data. When you connect a Pinterest account: OAuth tokens, account/profile identifiers, boards, pins, and analytics data made available by the Pinterest API, per the permissions you grant. See Section 4.

Usage and device data. IP address, browser type, device information, pages viewed, feature usage, log data, and approximate location derived from IP, collected automatically for security, debugging, and product improvement.

Communications. Messages you send to support or legal contacts.

2. How We Use Information

We use personal information to:

• Provide, operate, secure, and maintain the Service;
• Authenticate you and manage your account and workspaces;
• Generate AI content at your request and deliver it to you;
• Publish, schedule, and manage Pinterest content at your direction;
• Process payments, manage subscriptions, and meter credits;
• Provide support and respond to inquiries;
• Monitor, prevent, and detect fraud, abuse, and security incidents;
• Analyze usage to improve features and performance;
• Send transactional messages (receipts, renewal notices, security alerts) and, with your consent where required, product updates and marketing (opt-out available in every marketing email);
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your private content to train our own AI models.

3. Legal Bases for Processing (GDPR)

Where the GDPR or UK GDPR applies, we process personal data on these bases:

• Contract — to provide the Service you signed up for;
• Legitimate interests — security, fraud prevention, product analytics, and service improvement, balanced against your rights;
• Consent — optional marketing communications and non-essential cookies (withdrawable at any time);
• Legal obligation — tax, accounting, and lawful requests.

4. Pinterest Data

• We access Pinterest data only through Pinterest's official API after you authorize the connection via OAuth.
• We use Pinterest data solely to provide the Service (e.g., listing your boards, publishing/scheduling pins, retrieving analytics). We do not sell Pinterest data or use it for advertising.
• OAuth tokens are stored securely and used only to act on your behalf.
• You may revoke access at any time from your PinLaunchr settings or from Pinterest's connected-apps settings; upon revocation we delete or deactivate the associated tokens.
• Our use of Pinterest data complies with Pinterest's Developer Guidelines. PinLaunchr is not affiliated with or endorsed by Pinterest, Inc.

5. AI Processing

To generate pins, titles, and descriptions, your prompts, URLs, article excerpts, and related inputs are transmitted to third-party AI model providers (for example, OpenAI and image-generation model providers). These providers process the data to return generated output. We select providers that contractually limit use of API data, and we do not authorize them to use your inputs to train their publicly available models where such options exist. Generated images may be stored in our cloud storage (e.g., Supabase) or, at your option, uploaded to a third-party image host you choose (e.g., ImgBB, Postimages, ImgHippo), whose own privacy policies apply.

6. How We Share Information

We share personal information only with:

Category	Examples	Purpose
Payment processing	Stripe	Subscriptions, credit purchases, invoicing
Authentication	Google Firebase	Sign-in with Google/Apple/Pinterest, session management
Cloud hosting & storage	Supabase; our hosting providers	Database, file storage, application hosting
AI providers	OpenAI; image-model providers	Generating content you request
Pinterest	Pinterest API	Actions you direct on your Pinterest account
Optional image hosts	ImgBB, Postimages, ImgHippo	Hosting images when you choose this option
Professional advisers & authorities	Lawyers, accountants, regulators	Compliance, legal claims, lawful requests
Corporate transactions	Successor entities	Merger, acquisition, or asset sale (with notice)

We may also share aggregated or de-identified data that cannot reasonably identify you.

7. Cookies and Analytics

We use cookies and similar technologies for authentication, preferences, security, and analytics. See our Cookie Policy for details and choices. Where required, non-essential cookies are used only with your consent.

8. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. After account deletion, we delete or anonymize personal data within a reasonable period (generally within 90 days), except where longer retention is required for legal, tax, accounting, fraud-prevention, or dispute purposes. Backup copies are purged on a rolling schedule.

9. Security

We use administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit (TLS), encrypted storage with reputable cloud providers, httpOnly session cookies, scoped OAuth tokens, and access controls. See our Security Policy. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. International Data Transfers

We are U.S.-based and process data in the United States and other countries where our providers operate. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework participation of our subprocessors.

11. Your Rights (GDPR/EEA & UK)

If you are in the EEA, UK, or a jurisdiction with similar laws, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise these rights, email contact@pinlaunchr.com. We will respond within one month. You also have the right to lodge a complaint with your local supervisory authority.

12. Your Rights (California — CCPA/CPRA)

California residents have the right to: know/access the personal information we collect, use, and disclose; delete personal information; correct inaccurate information; and non-discrimination for exercising rights. We do not sell personal information and do not "share" it for cross-context behavioral advertising as defined by the CPRA, and we have no actual knowledge of selling or sharing personal information of consumers under 16.

To exercise rights, email contact@pinlaunchr.com with the subject "California Privacy Request." We will verify your request via your account email. You may use an authorized agent with written permission. We will respond within 45 days (extendable by 45 days with notice).

Categories of personal information collected (as defined by the CCPA): identifiers; commercial information; internet/network activity; geolocation (approximate, from IP); audio/visual (images you upload); and inferences for product analytics. Sources, purposes, and recipients are as described in Sections 1, 2, and 6.

13. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal information. If you believe a child has provided us personal information, contact contact@pinlaunchr.com and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice (e.g., email or in-product notice).

15. Contact Us

PinLaunchr 1209 Mountain Road Place Northeast Albuquerque, NM 87110, United States

• Privacy/Legal: contact@pinlaunchr.com
• Support: help@pinlaunchr.com