Privacy Policy

Information we collect

We collect the following types of information when you use PinMine AI:

• Account information: Your email address and password (managed through Supabase Auth).
• Pinterest connection: If you connect your Pinterest account, we store an OAuth token to enable pin scheduling features. We request minimum scope (pins:write, boards:read) only.
• Uploaded content: Product images (PNG, JPG) or product URLs that you submit for pin generation.
• User-pasted URLs: Any affiliate or destination URLs you paste into the tool for embedding in your pins.
• Payment information: Processed securely through Stripe or Gumroad. We do not store your credit card details — they are handled entirely by our payment processor.
• Usage data: We log the number of generation kits used, pins created, and account activity for billing and fair-use monitoring.
• Technical data: IP address, browser type, and device information for security and abuse prevention.

How we use your information

We use your information to:

• To generate AI-powered pins and social media content from your uploaded images.
• To connect to your Pinterest account for scheduling and publishing features.
• To process payments and manage your subscription.
• To send you email reminders about scheduled pins (if you opt in).
• To detect and prevent fraud, abuse, and bot activity.
• To provide customer support and service communications.

Third-party services

We use the following third-party services that may process your data:

• Supabase — Database & authentication — Email, account data, uploaded content.
• OpenAI / FLUX AI — Image generation — Uploaded product images only.
• Pinterest API — Pin scheduling & publishing — OAuth token, pin content.
• Stripe / Gumroad — Payment processing — Email, billing info (no card details).

We do not sell your data to any third party. We do not use your uploaded images to train AI models.

Data retention

We keep data only as long as it is needed:

• Uploaded product images are deleted 30 days after generation.
• User-pasted URLs are retained for the lifetime of your account for your convenience.
• Pinterest OAuth tokens are stored encrypted and deleted immediately when you disconnect your account.
• Account data is permanently deleted within 30 days of your account deletion request.

Your rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data.
• Delete: Request deletion of your account and all associated data.
• Export: Download your pin history and account data.
• Opt out: Unsubscribe from marketing emails at any time (link in every email).
• Disconnect: Revoke Pinterest access at any time from your account settings.

To exercise any of these rights, email us at support@pinmine-ai.com.

Cookies & advertising

We use cookies for the following purposes:

• Essential cookies: session authentication (keeping you logged in).
• Analytics cookies: understanding page views and feature usage.
• Advertising cookies: we use Google AdSense to display ads. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other internet sites.

You may opt out of personalized advertising by visiting Google's Ads Settings (https://www.google.com/settings/ads) or the Network Advertising Initiative opt-out page (http://www.networkadvertising.org/choices/). You can also disable third-party cookies in your browser settings. For more information about how Google uses data when you use our site, see https://policies.google.com/technologies/partner-sites.

Security

We protect your data with the following measures:

• All API keys are stored server-side only — never exposed in client-side code.
• Pinterest OAuth tokens are encrypted at rest.
• Supabase Row Level Security (RLS) is enabled — users can only access their own data.
• All AI generation requests are proxied through our backend.

Children's privacy

PinMine AI is not intended for users under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. We will notify users by email for material changes.

Contact

Questions? Email support@pinmine-ai.com.