1. Who we are and what this covers
Pinpilot is provided by Codaratec at https://pinpilot.codaratec.com. This policy covers the public website, member accounts, connected Pinterest features and our handling of support requests. For privacy questions, contact [email protected].
This policy describes the current product. Optional integrations process data only when they are configured and you or an authorized workspace user use the corresponding feature. Services you visit outside Pinpilot have their own privacy practices.
2. Information we process
- Account and workspace information. The name, email address, password hash, workspace identifiers, role, membership, settings and other details you provide during registration or use. Registration checks email format without verifying ownership by sending a confirmation email.
- Pinterest connections. Authorized account identifiers, profile information, board information, connection status, access and refresh tokens, and available publishing or performance data. We receive this through Pinterest after authorization and when a connected feature synchronizes or publishes.
- Content and operational records. Uploaded images, titles, descriptions, tags, destination links, project information, scheduled tasks, publication results, credit transactions, reports and relevant activity records. Information you place in a client project may be visible to users with access to that project.
- Billing records. Purchase selections, payment status, Stripe customer or subscription identifiers, invoice or transaction references, and credit fulfillment records. Stripe processes payment details; Pinpilot does not store full payment card numbers.
- Technical and security information. Session identifiers, request details, timestamps, login attempts, and IP addresses or derived identifiers used for security and rate limiting. Hosting and network services may also process request logs needed to operate the website.
- Support communications. Messages, account details and other information you choose to send when contacting us. Please do not send passwords or full payment card details.
3. How we use information
We use this information to create and authenticate accounts, separate workspaces, enforce permissions, maintain Pinterest connections, manage your content and publishing instructions, display reports, process purchases and credit balances, respond to requests, and keep the service reliable and secure.
For example, a scheduled task uses the selected image, text, destination board and the authorized account’s connection to submit a Pin to Pinterest. A payment confirmation updates the related workspace’s membership or credits after its webhook is verified.
We also use relevant records to investigate misuse, resolve billing issues and meet applicable legal obligations. Where applicable law requires a particular legal basis or gives you specific rights, the relevant basis depends on the purpose, such as providing a service you request, protecting the service, or complying with a legal requirement.
4. Service providers and data sharing
We share the information needed to perform the feature you use or support the operation of Pinpilot:
- Pinterest: authorization requests and the images, Pin text, links, boards and account details needed to publish or retrieve available account data.
- Hosting and storage services: databases, application infrastructure and uploaded media. Images may be stored on the application’s server or, when configured, an S3-compatible storage or CDN provider.
- OpenAI, when AI copywriting is enabled and requested: selected asset titles, descriptions and links, requested language and keywords are sent to generate copy. Avoid including sensitive information in these inputs. The AI provider processes requests under its own applicable service and privacy terms.
- Stripe, when billing is enabled: account email or existing customer identifier, workspace and product references, and checkout or billing instructions. Stripe handles the hosted payment flow and sends payment or subscription events back to Pinpilot.
- Email providers, when alerts are enabled: configured service alerts, their contents and the designated recipient information needed to deliver them.
- Authorized workspace users: account or project information made available according to their role and assigned access.
We may also disclose information when required by applicable law or when reasonably needed to investigate abuse, protect the service or address a rights claim. Pinpilot currently has no advertising network, Google Analytics or Google sign-in integration.
5. Public media, external images and demo data
Publishing images need URLs that Pinterest can retrieve. Uploaded media URLs may therefore be publicly accessible to anyone who obtains the URL, even when your workspace itself requires sign-in. Do not upload images you need to keep confidential. Images published to Pinterest follow Pinterest’s own visibility and retention practices.
The demo uses a separate sample workspace, illustrative accounts and example metrics. It does not expose your registered workspace to demo visitors. Demo content is not evidence of real customer results.
Some illustrative images and interface avatars, including images used in the demo and member interface, load from external image hosts such as Unsplash. Loading such an image sends a request to that host, which may receive your IP address and request metadata, including referrer information subject to your browser’s referrer controls. The external host handles that request under its own privacy practices.
6. Cookies and security
Pinpilot uses essential cookies for member sessions, restricted service sessions, login protection and the Pinterest authorization flow. Details, purposes and default lifetimes are listed in our Cookie Policy. Browsing the public information pages does not require a member account.
Security measures include Argon2 hashing for registered account passwords, server-side encryption of stored Pinterest tokens, role and workspace access checks, HttpOnly session cookies and login rate limits. Secure cookies are used for HTTPS deployments. These controls reduce risk; no service can promise perfect security.
Use a unique password, review access to client projects and disconnect accounts you no longer manage. Never send us your password in a support message.
7. Retention and account closure
We retain information while it is needed to provide the service, maintain your account or connections, honor publishing instructions, address support and billing issues, maintain security, or meet applicable legal obligations. Retention depends on the type of information and purpose; we do not promise that every record is deleted on a fixed schedule.
You can manage supported content and connections in your workspace. For account closure, broader deletion or questions about retained records, contact us. We review these requests through support, including any information that must be retained for legal, billing or security reasons. Copies in backups or third-party systems may remain according to their applicable retention processes.
Disconnecting a Pinterest account removes its stored connection from Pinpilot and stops future use through that connection. You can also revoke authorization in Pinterest’s account settings. Disconnecting or deleting a local item does not automatically remove Pins already published on Pinterest, copies others saved, or a media URL from every external cache.
8. Your choices and requests
You may contact us to request access to your account information, correction of inaccurate details, a copy or export of relevant information, deletion or closure of your account, or help revoking a connection. The rights available to you can also depend on applicable law. Where a workspace provides CSV reporting, you can export those reports directly.
Send requests to [email protected] with the account email and enough context to identify the workspace or records involved. Because registration does not verify email ownership, an email address alone may not establish your authority over an account. We may ask for reasonable additional information to verify identity or permission before disclosing or changing records.
Do not send passwords or unnecessary identity documents in your initial request. If further verification is appropriate, we will explain what is needed. We review requests and explain any limits or records we must retain.
9. Locations, age and changes
The location of processing depends on the hosting infrastructure and optional service providers used by Pinpilot. Information may be processed in countries other than your own, whose laws and practices can differ.
Pinpilot is intended for people aged 18 and over using it for their own work or an authorized business. If you believe a child has provided personal information to us, contact us so we can investigate.
We may update this policy as features or providers change. The effective date identifies the current version. We will communicate material changes through the service or an appropriate contact channel when needed.
10. Contact Codaratec
For privacy questions, access or deletion requests, or concerns about a Pinterest connection, contact our team.