Privacy Policy

Pin Poster (pinmaster.site) helps you schedule and publish Pinterest content using your official Pinterest developer app. This policy explains what information we handle and how it is used when you connect Pinterest.

Information we store

When you create an account we store your name, email, and password hash on our servers (SQLite database). For Pinterest integration we store App ID, App Secret (server-side only), redirect URI, OAuth access token, refresh token when provided, granted scopes, connected Pinterest username / account id, and your default board preference. We also store board metadata, scheduled pin drafts (titles, descriptions, links, image URLs, schedule times in GMT+5), and publish status.

How we use Pinterest data

Credentials and tokens are used only to authenticate with the Pinterest API on your behalf: reading boards and user account info, and—when your app has write scopes—creating boards and publishing pins you schedule. We do not sell personal data or use Pinterest tokens for advertising.

OAuth and tokens

Connecting uses Pinterest OAuth. The authorization code is exchanged for an access token on our server using your App ID and App Secret; the App Secret is never sent to the browser. You can disconnect at any time from Settings, which clears stored tokens and account identifiers.

Third-party services

Pinterest processes authentication and API requests according to Pinterest's privacy policy and developer terms. Review those policies in the Pinterest developer portal before connecting.

Your choices

You can disconnect Pinterest, clear app credentials, delete boards and pins, or delete your account data by contacting support. Session cookies keep you signed in; clearing site cookies ends your session.

Contact

Questions about this policy: privacy@pinmaster.site