Last updated: October 2026

This policy explains how Pinygent ("we", "us") processes personal data when you use our Pinterest intern for Etsy shops.

Controller

The controller responsible for data processing under the GDPR is:
Marla Bischoff
Am Scheinebach 3
59557 Lippstadt
Germany
Email: hello@pinygent.com

German legal notice: Impressum.

What we collect

Account data: email, name, and authentication identifiers (Supabase Auth)
Shop data: Etsy shop profile, listings, images, and metadata you connect
Pinterest data: OAuth tokens (encrypted at rest), boards, pins we publish, and analytics we sync
Etsy OAuth tokens (encrypted at rest) when you connect Etsy
Product usage: pin generation, schedules, autopilot settings, weekly digests, support messages
Technical data: IP address, device/browser info, and basic server logs needed to run and secure the service

Why we process data (purposes & legal bases)

Provide the service (Art. 6 (1)(b) GDPR): sync listings, compose and schedule pins, publish to Pinterest, show stats, send Sunday check-in emails you expect as part of the product.
Account & security (Art. 6 (1)(b) and (f) GDPR): authentication, fraud prevention, abuse detection.
Billing (Art. 6 (1)(b) GDPR): subscriptions via Polar as Merchant of Record.
Legal obligations (Art. 6 (1)(c) GDPR): e.g. bookkeeping or responding to lawful requests where applicable.
Product improvement (Art. 6 (1)(f) GDPR): aggregated / pseudonymised insights about feature usage — we do not sell personal data.

Payments (Polar)

Paid plans are sold through Polar, which acts as Merchant of Record. Polar processes payments, invoices, sales tax / VAT, and refunds under Polar's privacy policy.

Processors & third parties

We use service providers that process data on our behalf or as independent controllers:

Supabase (database, auth, storage)
Vercel (hosting / application delivery)
Resend (transactional and product emails)
OpenAI (AI copy and image generation for pins)
Pinterest API and Etsy Open API (when you connect those accounts)
Polar (billing / Merchant of Record)

Each provider has its own privacy policy. Where we use processors in the EU/EEA or with appropriate safeguards for transfers outside the EEA, we rely on contracts and/or Standard Contractual Clauses as required.

The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

Retention

We keep account and shop data while your account is active. After you delete your account we remove or anonymise personal data within a reasonable period, unless we must keep it longer for legal, billing, or security reasons (e.g. Polar invoices). Server logs are kept only as long as needed for operations and security.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. You may also lodge a complaint with a supervisory authority (in Germany, typically your state data protection authority). To exercise rights, email hello@pinygent.com.

Cookies & analytics

We use cookies and similar storage required for login sessions and security. We do not currently run third-party advertising cookies. If we add optional analytics later, we will update this policy and request consent where required.

Contact

Privacy questions: hello@pinygent.com
Postal: Am Scheinebach 3, 59557 Lippstadt, Germany

Privacy Policy