Privacy Policy

Last updated: August 1, 2026

PinPilot is a private, internal analytics and advertising management tool operated by its sole user and owner. It connects to the owner's own Pinterest Business account through Pinterest's official API (v5) using OAuth 2.0. It is not offered to the public and has a single user: the account owner.

1. Data we access

Through the Pinterest API, with read-only scopes (user_accounts:read, pins:read, boards:read, ads:read), PinPilot accesses: account-level analytics (impressions, engagements, outbound clicks), Pin and board performance metrics, and advertising campaign performance data (spend, impressions, clicks, conversions) belonging exclusively to the owner's own account.

2. Data we store

PinPilot stores only aggregated performance metrics and internally computed indicators (trends, budget recommendations) on a private, self-hosted server located in the European Union. In accordance with Pinterest's Developer Guidelines and data storage policy, raw Pinterest API data is not cached or retained beyond what is permitted; OAuth tokens are stored encrypted and used solely to authenticate API requests.

3. Data we do not collect

PinPilot does not collect data about Pinterest users other than the account owner, does not track visitors, does not use advertising cookies, and does not process personal data of third parties.

4. Sharing and selling

No data is sold, rented, shared with, or transferred to any third party. Data never leaves the owner's private infrastructure, except for optional AI-assisted analysis requests sent to an AI API provider, which contain only aggregated metrics and no personal data.

5. Security

Access to the tool is restricted to the owner. The server uses HTTPS, firewall rules, and encrypted credential storage. API secrets are never exposed client-side.

6. Data retention and deletion

Stored metrics can be deleted by the owner at any time. Revoking the app's access from Pinterest account settings (Settings → Security → Connected apps) immediately terminates API access.

7. Your rights (GDPR)

As this tool processes only the owner's own business data, no third-party data subject rights are implicated. For any question regarding this policy, contact the operator at the email address associated with the connected Pinterest Business account.

FR — PinPilot est un outil interne privé, utilisé uniquement par sa propriétaire, connecté à son propre compte Pinterest Business via l'API officielle Pinterest (OAuth 2.0, lecture seule). Seules des métriques agrégées sont stockées, sur un serveur privé hébergé dans l'Union européenne. Aucune donnée n'est vendue, partagée ni transférée à des tiers. Aucune donnée d'autres utilisateurs Pinterest n'est collectée. L'accès peut être révoqué à tout moment depuis les paramètres du compte Pinterest.