Privacy policy

01. About this policy

This policy describes how Pinjolt handles personal information when you visit this website or use our content creation and Pinterest publishing application. “We,” “us,” and “our” refer to the operator identified in the contact section. Third-party services have their own privacy policies.

02. Information we collect

• Account information: your name, email address, optional avatar, and account preferences. For password sign-in, we store a password hash. If you use a supported sign-in provider, we receive identity information needed to create and authenticate your account.
• Your content and settings: website names and domains, article URLs, board assignments, uploaded sample images, generated pin images and copy, publishing schedules, review decisions, and publishing history.
• Pinterest information: authorization and refresh tokens, account identifiers and username, boards, and performance metrics for pins associated with your use of Pinjolt.
• Usage and technical information: AI provider and model usage, token and image counts, estimated generation costs, and operational logs. Hosting and infrastructure providers may process connection details such as IP addresses, browser information, request times, and errors.
• Communications: information you provide when you contact us or request help, such as the email address and message you send through the contact form.

03. How we use information

We use this information to authenticate your account, import and organize your article URLs, generate pin creative, manage your review queue, publish approved pins, and display analytics and usage records. We also use it to send verification, password reset, and service-related emails, provide support, investigate errors or abuse, and meet legal obligations.

Where a legal basis is required, we process information to provide the service you request, pursue legitimate interests in operating and protecting it, comply with legal obligations, or act on your consent when applicable. We do not sell your personal information or use Pinterest account data for third-party advertising.

04. Your Pinterest connection

You connect Pinterest through its authorization flow. Pinjolt does not ask for your Pinterest password. The requested permissions allow us to read your account identity and boards, read pin information for analytics, and publish pins you approve.

Disconnecting Pinterest in Pinjolt removes the stored tokens, Pinterest identity, board list, and cached analytics for that site. You can also revoke access through your Pinterest account settings. Disconnecting does not delete your Pinjolt article library or publishing history, and it does not remove pins already published on Pinterest.

Pinterest processes data under its own privacy policy. Your authorized publishing actions send the approved image, title, description, alt text, destination URL, and board selection to Pinterest.

05. Service providers & AI

We use third-party services to provide specific functions:

• Anthropic: receives article URLs and generation instructions to prepare pin copy. When board suggestions are needed, the relevant board names may be included.
• fal.ai and the selected image model: receive generation instructions, article URLs, website domains, and sample-image URLs to create pin images.
• Cloudflare R2: stores uploaded and generated images. These images are served through public asset URLs so the app, generation providers, and Pinterest can retrieve them. Anyone with an image URL may be able to access it; do not upload confidential or sensitive images.
• Resend: processes recipient email addresses and message content to deliver account and service notifications, and the messages you send through the contact form.
• Cloudflare Turnstile: checks that a person, not an automated program, is sending the contact form. It runs in your browser on the contact page and sends Cloudflare signals such as your IP address and browser details, under Cloudflare’s Turnstile privacy notice.
• Google Analytics: receives the pages you view on this website and in the application, with details your browser sends, such as its type, language, screen size, approximate location, and the page that referred you, so we can see how Pinjolt is used.
• Hosting, database, and sign-in providers: process information needed to host the service, store its records, and authenticate supported sign-in methods.

Providers process information under their own terms and applicable agreements. Avoid including sensitive personal information in article URLs, uploaded references, or generation content. We may also disclose information when legally required, to protect rights and safety, or in connection with a business transfer subject to applicable privacy protections.

06. The contact form

When you send a message through the contact page, we receive the email address you enter and your message, and email them to our own inbox so we can answer you. Pinjolt’s servers keep no copy: their records only note that a message arrived and how long it was. We keep the email for as long as we need it to answer you and follow up.

Before a message is sent, Cloudflare Turnstile checks that a person is sending it. To limit abuse, our server also counts the messages sent from each IP address for one minute, then forgets the count.

07. Cookies & browser storage

This website and the application use Google Analytics, which sets cookies to count visits and see which pages are used. Neither includes advertising pixels. You can block these cookies in your browser settings or with Google’s opt-out browser add-on. The application uses browser local storage to maintain your signed-in session and to reopen the page you last used. Clearing that storage signs you out on that browser. While you are signed in, the application also sets a cookie of its own on pinjolt.com that only records that you are signed in, so this website can take you straight to the application. It holds no personal information and is removed when you sign out. Third-party sites, including Pinterest and sign-in providers, may use their own cookies when you visit their authorization pages.

08. Retention & deletion

We retain account information and content as needed to operate your account and provide the service. You can remove individual content, delete a site, reset the AI usage log, or delete your account from the application.

Account deletion removes your account and associated application records, including sites, article records, queues, history, board data, and usage records, and deletes associated images from our object storage. Resetting the usage log only removes Pinjolt’s usage records; it does not change a provider’s own records.

Information in operational logs, backups, or records required for legal, security, or dispute-resolution purposes may persist beyond an account deletion. Copies held by third parties, browser caches, or Pinterest are governed by those services’ retention and deletion processes. Manage already-published pins directly on Pinterest.

09. Your choices & rights

You can review your content and settings in the app, disconnect Pinterest, remove uploaded images, and delete your account. Depending on your location and applicable law, you may also have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to certain processing, and withdraw consent where processing relies on it.

Use the contact details below to make a request. We may need to verify your identity before acting on it. We will respond as required by applicable law. You may also have the right to complain to your local data protection authority, and we will not discriminate against you for exercising applicable privacy rights.

10. Security & international transfers

We use access controls, password hashing, and authenticated connections to help protect account information. No online service or storage system can guarantee absolute security. Keep your credentials private and only connect accounts you are authorized to manage.

Our service providers may process information in countries other than your own. Where applicable law requires transfer safeguards, processing must be supported by the required safeguards. The privacy laws in a provider’s location may differ from those in your location.

11. Children’s privacy

Pinjolt is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and remove it as appropriate.

12. Policy changes

We may update this policy as the service changes. The date at the top identifies the latest revision. For material changes, we will provide additional notice where required by applicable law.

13. Contact

Pinjolt is operated by Jason.

For questions or requests about these policies, write to us through the contact page or email hello@kindrootlabs.com. Please include the email address associated with your account, but never send your password or access tokens.