Privacy Policy

Using the generator

Pages you turn into pins

When you paste a link, our server fetches that page to read its title, description and images, and sends them back to your browser. We do not keep the page, the link or what we found in it. Only when a page or image cannot be read can its address appear in an error entry in our logs (see Logs and security).

Images from other websites reach your browser through our server, so that it can draw and save them. We do not keep those images. The image address appears in our web server log (see Logs and security).

What stays in your browser

Pins are drawn and saved by your browser. A pin you download never reaches our servers. Your browser also keeps, on your device only:

• your current work (the link, the text you edited, your pin settings), deleted after 3 days without use;
• photos you add from your device, deleted after 3 days;
• how many pins you downloaded today, and whether you left your email;
• your sign-in token, if you sign in (see below);
• if you use pin scheduling, the ID of the site you last chose to work on, kept until you choose another (it is also removed when the dashboard finds that site deleted);
• while you sign in with Google, the page to return to and a style you were saving, removed once you are back (or when you close the tab).

Expired items are removed the next time you open the site. You can remove all of it at any time by clearing this site’s data in your browser.

Your email address (optional)

If you leave your email address to download more pins, we send it to Resend, our email provider, which keeps it in our contact list, and we send you one welcome email. We do not store it in our own database. Every email we send to that list has an unsubscribe link: using it deletes your address from the list. You can also write to [email protected]. The link carries your address encrypted, so it never shows in our logs.

Your account

You sign in with Google. Google tells us your email address, your name and your Google account ID; we keep those, and when the account was created. We never see your Google password, and we do not store your profile picture.

Signing in gives your browser a sign-in token that works for 7 days. Signing out deletes it from your browser.

With an account we also keep (until you delete it, see Your rights):

• a record of each website download: the time and the template, colors, font and file format. Not the image and not its text. We use it to count your daily downloads and keep it as usage history.
• "My styles": each look you save (template, colors, font, text sizes, what is shown, the button text and the site name you entered, and the name you gave it). When you remove a style it is hidden, but the record is kept and used only to learn which looks are popular.

The connector for AI assistants

When you connect InsightPins to an AI app (Claude, ChatGPT and others), the app sends us the requests it makes for you: links to read, the text for a pin, your style choices and, if you ask for one, your photo. We do not receive your conversation or the files you share with the assistant, except a photo you ask to have added to a pin. What the AI app does with your conversation is covered by its own privacy policy.

Connections

For each connection we keep the app’s name, the return addresses it registered, when it was made and last used, and its tokens as one-way hashes. A connection that goes unused for 30 days expires. When a connection ends, its tokens are erased; the record that it existed stays with your account.

Rendered pins

Each pin the assistant renders is stored with Cloudflare R2 at an address nobody can guess. Anyone who has that link can open the image, so share it only with people you want to see it. The image is deleted 7 days after it is made (Cloudflare can take up to a day longer). The pin’s details (its text, image links and settings) are kept with it for those 7 days, so you can open it again from "Recent pins". After that, a render record stays with your account: the time, the template, colors and font, the pin’s title and the file size. We use it to count your daily renders and keep it as usage history.

Your photos

Photos you upload (JPEG, PNG or WebP) are re-encoded, which removes location, camera and other hidden data, and stored with Cloudflare R2 at an address nobody can guess. Anyone who has that link can open the photo. Photos are deleted 7 days after upload. An upload record (time, size, format, dimensions, how it was uploaded, and a fingerprint of the file that lets us spot the same photo sent twice) stays with your account; it does not contain the photo or its file name. Upload links work once, for 15 minutes, and we store only a hash of them.

Pin scheduling and Pinterest

Pin scheduling (InsightPins Scheduler on Pinterest) publishes pins you made here to your own Pinterest boards at the times you pick, one pin at a time. Pins for a real Pinterest account are posted only once Pinterest has approved our app and we have switched that on; until then we post only to Pinterest test (sandbox) accounts. A pin more than 2 hours late is not posted on its own and is shown as missed, waiting for you. It is in development and open only to us, for testing. This section describes how it handles your data.

Every pin is chosen by you

A pin is published only after you press "Add to schedule" on that one pin and confirm its image, title, description, link, board and time. You can also press "Publish now" on a pin already in your schedule and confirm, which posts that one pin at once. A pin that failed, needs checking or was missed is sent again only when you press "Try again" or "Move to the next free slot" on that one pin. A pin an AI assistant prepares for your schedule waits as a draft until you approve it yourself on the website. We never publish a pin you did not choose, never schedule pins in bulk, and never re-post published pins. Links in scheduled pins can only point to websites you have verified as yours.

Your websites

For each website you add we keep its domain, the name and time zone you give it, a verification code, and whether and how it was verified. To verify it we look up the domain’s DNS records, or fetch its home page once and look for our tag. We keep the result of the last check (counts, status codes and host names, never your page’s content). When you remove a website, it is hidden and its record stays with your account; its pins that are not published or exported yet are deleted, with their images. The others stay with your account as the record of what went out. Removing a website is refused while one of its pins is being sent to Pinterest.

Connecting your Pinterest account

You connect on Pinterest’s own page; we never see your Pinterest password. Pinterest asks you to allow five permissions: to see your account and its followers, your public boards and your public pins, and to create, change or delete your public boards and your public pins. We use them only to show which account is connected, to list your boards so you can pick one, to write each pin’s board name into a CSV file you ask for, and to create the pins you scheduled (Pinterest asks for the permission over boards to create a pin). We never create, change or delete a board, and we never change or delete a pin on Pinterest. From Pinterest we keep:

• the access and refresh tokens Pinterest gives us, encrypted with a key that is not stored in our database. They are never shown in your browser and never written to our logs;
• the permissions granted;
• the ID Pinterest gives each account you connect, so that connecting the same account again renews it instead of adding it twice. It is deleted when you disconnect the account;
• for each of your websites, the ID of the default board you picked for it, deleted when you disconnect the account;
• for each pin you schedule, the ID of the board you picked and, once it is published, the ID of the pin Pinterest created. Both IDs are deleted 30 days after the pin is published, and at once if you disconnect the account;
• if Pinterest refuses a pin or answers with an error, the error message it gave, kept with that pin until it is published or deleted, or you disconnect the account.

Your username and board names are read from Pinterest each time we show them, and never stored. We do not read your followers, your other pins, your messages or your analytics. We do not sell Pinterest data, use it for advertising, or share it with anyone else.

Scheduled pins

For each scheduled pin we keep the image and a fingerprint of it (to refuse the same image twice on one account), its title, description, link, alt text, board and time, its template, colors and font, and whether and when it was published. The image is stored with Cloudflare R2 at an address nobody can guess, which Pinterest reads to create the pin.

• 30 days after the pin is published, its image and its Pinterest IDs are deleted (Pinterest keeps its own copy). The record keeps the rest (its text, link, time, design and the fingerprint, not the image) and stays with your account.
• A pin you export for Pinterest’s own bulk upload counts as published from the moment you export it; its 30 days run from the time in the file.
• A published or exported pin can no longer be deleted on its own: its image and record are removed when you delete your account. A pin cannot be deleted while it is being sent to Pinterest either; try again a minute later.
• A pin that is not published, for example because Pinterest refused it, keeps its image until you publish or delete it. Deleting a pin deletes its image at once.

You can export your queue as a CSV file for Pinterest’s own bulk upload. The file holds only pins you already added to your schedule one by one, and those pins are then marked as exported. To write it we read your board names from Pinterest at that moment, and we do not keep them. The file is sent to your browser and is not stored on our servers. It holds each pin’s title, description, link, board name and time, and the address of its image, which Pinterest reads when you upload the file.

If a pin fails, needs checking or is missed, or your Pinterest account needs connecting again, you see it in the app: the calendar shows each pin’s status and why, and your account list shows an account that needs connecting. We also email you about it at your account’s address, through Resend, at most once an hour and only when something new needs you. The email is plain text: it says how many pins and accounts need you, lists the titles (shortened to 60 characters) and statuses of up to 10 of those pins, and links to your calendar. It never contains Pinterest’s error messages.

Disconnecting

Disconnecting your Pinterest account in InsightPins deletes its tokens and its ID at once, together with the board and pin IDs of its pins, the error messages Pinterest gave for them, and the default boards of your websites. Pins still waiting keep their text and time; to publish them, connect again and pick a board for each before its time. One more than 2 hours late is not posted on its own: delete it and add it again. You can also remove InsightPins Scheduler from the apps connected to your Pinterest account in Pinterest’s settings: that ends our access at once, and disconnecting here as well deletes the tokens we hold. To have the rest deleted, see Your rights.

Logs and security

All traffic goes through Cloudflare, which protects the site from attacks and abusive bots. Cloudflare processes your IP address and the details of each request, may set a security cookie, and keeps its request logs for 7 days.

Our web server logs each request: your IP address, the time, the address requested (including anything after the "?"), the referring page, your browser and your country. The address can include the address of an image you added from another website, or, when you open a pin from an assistant’s edit link, that pin’s text and image links. These logs are deleted after about two weeks.

Our application logs record events such as a new account (with its email address), new connections, uploads (size and format) and errors, by account ID. An error entry can include the address of a page or image that could not be read. These logs have no fixed deletion date yet: older entries are removed as the log space fills up.

We use these logs to keep the service running and to stop abuse. Everything travels over HTTPS. Your sign-in token reaches your browser in the part of the address after "#", which browsers never send to a server, so it is not in our logs. Connection tokens are stored only as one-way hashes, Pinterest tokens are encrypted, and access to the servers is limited to the operator. No method of storage or transfer is completely secure, but we work to protect your data.

Analytics, cookies and browser storage

We use Google Analytics to see how the site is used. It records the pages you open (their address, which can include a pin’s text when you open an edit link), and events such as a finished download, or a saved style with its template, colors and font. The events we send never carry your email address, your pin text or the links you paste. Google Analytics sets its own cookies and keeps this data for 2 months. The upload, unsubscribe and sign-in return pages do not record page views, because their addresses carry a private code. We do not use advertising tags on this site.

We set a cookie of our own only during Google sign-in and while you connect Pinterest, to protect those steps against forgery; it expires after 10 minutes. The data your browser keeps for the generator is listed under Using the generator.

Who receives your data

Only the services we need to run the product, each for the purpose listed:

• Cloudflare: network protection, and storage of rendered pins, uploaded photos and scheduled pin images (R2).
• OVH: the server and the database.
• Google: sign-in and Google Analytics.
• Resend: the email list and the welcome email, if you leave your email address, and emails about your scheduled pins (your account’s address and the pins’ titles).
• Pinterest: the pins you schedule, when you connect your account.
• The AI app you connect: the results of the requests it makes for you.

We may also disclose data where the law requires it, or to protect the rights and safety of our users and of the service. We do not sell personal data.

We are based in Malaysia, and our providers process data in other countries, including the United States and countries of the EU. Where data leaves the EEA, the UK or Switzerland, we rely on the safeguards these providers offer, such as standard contractual clauses.

Why we may use your data

• To provide what you ask for: making pins, your account, saved styles, the connector, publishing the pins you schedule, and emailing you when one of them needs you (contract).
• To keep the service secure, count daily limits, understand usage and improve the product, through logs, Google Analytics and usage records (legitimate interests). You can object at any time by writing to us; to stop Google Analytics yourself, block its cookies or use Google’s opt-out add-on.
• To send the welcome email and keep you on our list when you leave your email address (consent). You can withdraw it at any time; this does not affect what happened before.

Your rights

You can delete your account yourself: in the dashboard, open your account (your name at the top, or the person icon on a phone) and choose "Delete account". That deletes your account and everything linked to it at once (saved styles, download and render records, connections, uploads, websites, Pinterest connections and scheduled pins), and ends every sign-in and assistant connection. The images of your scheduled pins are deleted with it; rendered pins and uploaded photos already stored are deleted on their own schedule above.

You can also ask to see the data we hold about you, correct it, delete it, receive a copy, restrict or object to how we use it, and withdraw consent. Write to [email protected] from your account’s email address. We answer within one month and may ask you to confirm it is you.

You can also complain to your local data protection authority, though we would like the chance to fix the problem first.

Children

The product is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to [email protected] and we will delete it.

Changes

We post changes to this policy on this page and update the date at the top. When we start storing something new for a feature, this page says so before that feature opens to everyone.

Contact

Questions and requests: [email protected].