Privacy Policy

1. Overview

PinBotix ("we", "our", or "us") operates the PinBotix software-as-a-service platform. We are committed to protecting user privacy and handling data in full compliance with Pinterest Developer Policies, GDPR, and global privacy standards.

2. Pinterest API & Data Access

Our application connects to Pinterest via the official Pinterest API v5 OAuth 2.0 framework with strictly scoped user permissions:

• pins:read / pins:write: To create, schedule, and publish pins requested by the account owner.
• boards:read / boards:write: To retrieve and associate destination boards for user-scheduled pins.
• user_accounts:read: To verify profile identity and account business status.

3. Token Security & Encryption at Rest

All OAuth 2.0 access tokens and refresh tokens are encrypted at rest using industry-standard AES-256-GCM authenticated encryption. We never expose or sell access tokens, credentials, or private pin data to any third party.

4. User Rights & Token Revocation

Users may disconnect their Pinterest accounts at any time directly through the platform dashboard or by revoking permissions in their Pinterest Account Settings. Upon disconnection, stored authorization tokens are permanently purged.

5. Contact Information

For privacy inquiries or data requests, please contact our privacy team at privacy@pinbotix.com.