Privacy Policy

1. Data controller

The controller of personal data is:

• Pinautopilot
• Email: [email protected]

2. Data collected

We collect the following categories of data:

2.1 Data you provide to us directly

• Registration data: last name, first name, email address, password (encrypted)
• Profile data: information about your e-commerce store, your website URL
• Payment data: processed securely by our payment provider (Stripe); we do not store your full banking details

2.2 Data collected automatically

• Connection data: IP address, browser type, pages visited, access dates and times
• Cookies: session identifiers, user preferences

2.3 Data from third parties (Pinterest)

When you connect your Pinterest account to Pinautopilot, we access the following data in accordance with the permissions you grant us:

• Basic information from your Pinterest profile
• List of your Pinterest boards
• Statistics for your pins (with your authorization)
• Ability to publish pins on your behalf (with your explicit authorization)

Important: We only access the data strictly necessary for the operation of the service. You can revoke access to your Pinterest account at any time from your Pinterest account settings.

2.4 Data from third parties (Shopify)

When you connect your Shopify store to Pinautopilot (installation from the Shopify App Store or manual connection), we access the following data in accordance with the permissions you grant:

• Store information: store name and myshopify.com domain
• Product catalog: titles, descriptions, images and prices, used to generate your Pinterest pins
• Blog content: reading and, with your authorization, publishing SEO blog articles on your store
• OAuth access token: stored securely to call the Shopify API on your behalf; we never have access to your Shopify account password

Important: for merchants installed from the Shopify App Store, the subscription is billed directly through Shopify (Shopify App Pricing) and appears on your Shopify invoice — in that case we do not process any of your banking data.

3. Purposes of processing

Your data is processed for the following purposes:

• Service provision: creating and managing your account, creating and publishing your Pinterest pins with your explicit consent
• Service improvement: anonymized statistical analysis to improve our features
• Communication: sending transactional emails (registration confirmation, service notifications) and, with your consent, marketing emails
• Billing: managing subscriptions and payments (via Stripe, or via Shopify App Pricing for merchants installed from the Shopify App Store)
• Security: fraud prevention and protection of our systems
• Legal obligations: compliance with our legal and regulatory obligations

4. Legal basis for processing

We process your data on the following legal bases:

• Performance of the contract: to provide the services you subscribed to
• Consent: for marketing communications and access to your Pinterest account
• Legitimate interest: for the improvement of our services and security
• Legal obligation: to comply with our accounting and tax obligations

5. Data sharing

We never sell your personal data. We may share your data only with:

• Pinterest: as part of using their API to publish your pins
• Shopify: as part of syncing your product catalog, reading/publishing your blog, and billing for merchants installed from the Shopify App Store (Shopify App Pricing)
• Payment providers: Stripe for secure payment processing (excluding merchants billed via Shopify)
• Hosting providers: for the secure storage of your data
• Competent authorities: if required by law

All our subcontractors are bound by contractual confidentiality and security obligations that comply with the GDPR.

6. International transfers

Some of our providers may be located outside the European Union. In such cases, we ensure that appropriate safeguards are in place (European Commission standard contractual clauses, adequacy decisions) to protect your data.

7. Retention period

We keep your data for the following periods:

• Account data: for the entire duration of your registration, then 3 years after the last activity
• Billing data: 10 years in accordance with accounting obligations
• Connection data: 1 year
• Cookies: maximum 13 months
• Shopify merchants: upon uninstalling the app, all of your store's data (products, scheduled pins, blog posts) is automatically deleted within 48 hours, in accordance with Shopify's GDPR requirements

8. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct your inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to restriction: restrict the processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to the processing of your data
• Right to withdraw your consent: at any time for processing based on consent

To exercise these rights, contact us at: [email protected]

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority).

9. Data security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Password encryption
• Restricted access to personal data
• Intrusion monitoring and detection
• Regular backups

10. Cookies

Our site uses cookies to:

• Essential cookies: required for the site to function (session, authentication)
• Performance cookies: to analyze site usage and improve it
• Functionality cookies: to remember your preferences

You can configure your browser to refuse cookies, but some site features may no longer work correctly.

11. Pinterest Compliance and User Consent

Pinautopilot uses the Pinterest API in accordance with the Pinterest API Terms of Service, the Pinterest Developer Guidelines and the Pinterest Privacy Policies.

11.1 Explicit consent for each action

Pinautopilot NEVER publishes content to your Pinterest account without your explicit action. Each publication requires:

• Your manual validation before any pin is published
• A clear confirmation from you for each action on your Pinterest account
• The ability to preview the content before publication

11.2 Permissions requested

When connecting your Pinterest account, we request only the following permissions:

• Profile read: to display your account information
• Boards read: to let you choose where to publish
• Pin creation: only with your explicit confirmation

11.3 No storage of Pinterest data

In accordance with Pinterest guidelines, we do not store data accessible via the Pinterest API beyond what is strictly necessary for the operation of the service. Access tokens are stored securely and can be revoked at any time.

11.4 Revoking access

You can revoke Pinautopilot's access to your Pinterest account at any time:

• From your Pinautopilot dashboard (Integration section)
• Directly from your Pinterest account's security settings

Warning: Pinautopilot is not affiliated with, sponsored by, or endorsed by Pinterest, Inc. Pinterest is a registered trademark of Pinterest, Inc. Our service is an independent content creation tool that uses the official Pinterest API.

12. Shopify Compliance

Pinautopilot uses the Shopify API in accordance with the Shopify API License and Terms of Use and its Privacy Policy.

12.1 Automatic data deletion upon uninstall

When you uninstall Pinautopilot from your Shopify store, we receive a Shopify webhook (shop/redact) that triggers the automatic deletion, within 48 hours, of all your store's data: synced products, scheduled pins, and blog posts. Each request is logged and, if it fails for a technical reason, automatically retried until deletion is confirmed.

12.2 GDPR requests regarding your store's customers

In accordance with Shopify's GDPR requirements, Pinautopilot automatically responds to the customers/data_request and customers/redact webhooks sent by Shopify. Pinautopilot only syncs your product catalog and stores no personal data about your store's customers, so these requests are acknowledged with no customer data to transmit or delete on our end.

12.3 Billing via Shopify

For merchants installed from the Shopify App Store, the Pinautopilot subscription is managed through Shopify App Pricing: plan changes, billing history, and payment methods are managed directly in your Shopify admin, never by Pinautopilot or Stripe.

Warning: Pinautopilot is not affiliated with, sponsored by, or endorsed by Shopify Inc. Shopify is a registered trademark of Shopify Inc. Our application is an independent third-party tool that uses the official Shopify API.

13. Changes to this policy

We may update this privacy policy periodically. We will inform you of any significant changes by email or via a notification on our site. The date of the last update is shown at the top of this page.

14. Contact

For any questions regarding this privacy policy or to exercise your rights, contact us:

• Email: [email protected]
• Contact page: Contact us