At PinFlow AI ("we," "our," or "us"), we are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding your data when you use our Pinterest automation and scheduling service.

1. Information We Collect

1.1 Account Information

• Email address and name when you create an account
• Billing information when you subscribe to our paid plans
• Profile information you choose to provide

1.2 Pinterest Integration Data

• Pinterest account credentials (OAuth tokens, never passwords)
• Pinterest board and pin information
• Pinterest analytics and performance data
• Images and content you upload for Pinterest posting

1.3 Usage Information

• How you use our service and features
• Scheduling preferences and automation settings
• Performance metrics and analytics
• Device information and IP address

1.4 Communication Data

• Customer support conversations
• Feedback and survey responses
• Email communications with our team

2. How We Use Your Information

2.1 Service Provision

• Authenticate your Pinterest account and maintain connection
• Schedule and post content to your Pinterest boards
• Provide analytics and performance insights
• Generate AI-powered content suggestions

2.2 Account Management

• Process payments and manage subscriptions
• Send service-related notifications
• Provide customer support
• Enforce our Terms of Service

2.3 Service Improvement

• Analyze usage patterns to improve features
• Develop new functionality
• Ensure security and prevent abuse
• Conduct research and analytics (anonymized data only)

3. Information Sharing and Disclosure

3.1 Authorized Sharing

We may share your information only in these limited circumstances:

• Pinterest API: To post content and retrieve analytics from your Pinterest account
• Service Providers: Trusted partners who help us operate our service (hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In the event of a merger, acquisition, or sale of assets

3.2 Data Processing Partners

4. Pinterest Integration

4.1 Pinterest Permissions

When you connect your Pinterest account, we request only necessary permissions:

• Read access: To view your boards, pins, and analytics
• Write access: To create pins and boards on your behalf
• Analytics access: To provide performance insights

4.2 Pinterest Data Usage

• Pinterest data is used solely to provide our automation service
• We comply with Pinterest's API Terms of Service
• You can revoke Pinterest access at any time
• Pinterest data is deleted when you disconnect your account

5. Data Security

5.1 Technical Safeguards

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Monitoring: 24/7 security monitoring and incident response

5.2 Operational Security

• Employee security training and background checks
• Secure development practices and code reviews
• Regular security updates and patches
• Incident response and breach notification procedures

5.3 Data Breach Response

In the unlikely event of a data breach, we will notify affected users within 72 hours and take immediate steps to secure the breach and prevent further unauthorized access.

6. Data Retention

7. Your Rights and Choices

7.1 Data Rights (GDPR & CCPA)

• Access: Request a copy of your personal data
• Portability: Export your data in a machine-readable format
• Correction: Update or correct your personal information
• Deletion: Request deletion of your account and data
• Restriction: Limit how we process your data
• Objection: Object to certain types of data processing

7.2 Account Controls

• Update your profile and preferences in account settings
• Disconnect Pinterest accounts at any time
• Download your data before account deletion
• Opt out of marketing communications

7.3 Exercising Your Rights

To exercise any of these rights, contact us at privacy@pinflow.ai or use the data controls in your account settings. We will respond within 30 days.

8. International Data Transfers

Our servers are located in the United States. If you are accessing our service from outside the US, your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions where available
• Additional security measures for sensitive data

9. Children's Privacy

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Send you an email notification to your registered email address
• Display a prominent notice on our website
• For significant changes, obtain your consent where required by law

Your continued use of our service after changes take effect constitutes acceptance of the updated policy.

11. Contact Us