Privacy Policy

1. Introduction

Pibbin ("we", "our", "us") operates the pibbin.com website and the Pibbin application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Pibbin uses the Pinterest API in compliance with Pinterest's Developer Guidelines and Terms of Service.

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and profile picture (via Google sign-in).

Connected accounts: When you connect your Pinterest account, we receive an OAuth 2.0 access token from Pinterest. We store this encrypted token solely to authenticate API requests on your behalf. We never collect, request, or store your Pinterest username or password.

Content you create: Images, text, and links you upload or create within Pibbin for the purpose of scheduling and publishing pins.

Usage data: We collect basic analytics such as pages visited, features used, and error logs to improve the service.

3. Pinterest API Data Usage

Pibbin accesses the Pinterest API to provide its scheduling and publishing features. The following practices govern how we handle Pinterest data:

• No local storage of Pinterest data. We do not download, cache, or store Pinterest account data (such as boards, pins, or profile information) on our servers. Each time you view your boards or publish a pin, Pibbin makes a live API request to Pinterest and displays the response directly.
• OAuth 2.0 authorization only.We access your Pinterest account exclusively through Pinterest's official OAuth 2.0 flow. We never ask for, collect, or store your Pinterest login credentials. You grant access through Pinterest's own authorization screen.
• Explicit user confirmation for actions. Every action that modifies your Pinterest account (such as creating or publishing a pin) requires your explicit confirmation before it is executed. Pibbin will never publish, modify, or delete content on your behalf without your direct approval.
• Data serves only the account holder. Any information retrieved from the Pinterest API is used solely to serve the authenticated account holder. We do not use Pinterest data for any other purpose, including analytics, profiling, or serving other users.
• No combining of account data. We do not combine your Pinterest account data with data from other Pinterest accounts, other social media platforms, or any external data sources or services.

4. How We Use Your Information

We use your information to:

• Provide and maintain the Pibbin service
• Schedule and publish content to your connected Pinterest account at your direction
• Generate AI-powered images and suggestions on your behalf
• Send transactional emails (login links, notifications)
• Improve our service and fix bugs

5. Third-Party Data Sharing

We do not sell, rent, trade, or otherwise share your personal data with third parties for their own marketing or commercial purposes.

We share data only with the following service providers, solely to operate the Pibbin service:

• Pinterest API: To publish pins and retrieve board information on your behalf, only when you explicitly authorize each action.
• Supabase: Our database and authentication provider, for storing your account information and encrypted tokens.
• Vercel: Our hosting provider, for serving the application.
• Fal.ai: For AI image generation. Only text prompts you provide are sent; no personal data or Pinterest data is shared with this service.

We do not share any Pinterest API data with third parties. Data retrieved from the Pinterest API is displayed to you and is not transmitted to any other service or entity.

6. Data Retention

We retain your account information and content you create within Pibbin for as long as your account is active.

Pinterest API data is not retained. Because we make live API calls to Pinterest and do not cache or store the responses, there is no Pinterest data retained on our servers. When you disconnect your Pinterest account or delete your Pibbin account, we delete your encrypted access token and any associated content you created within Pibbin.

You can delete your account and all associated data at any time from your account settings.

7. Data Security

We use industry-standard security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Encrypted storage of Pinterest OAuth tokens at rest
• Row-level security policies on our database
• Regular security reviews and access controls

8. Your Rights

You have the right to:

• Access, correct, or delete your personal data at any time
• Disconnect your Pinterest account, which immediately revokes our API access
• Request a copy of the data we hold about you
• Request complete deletion of your account and all associated data

To exercise any of these rights, visit your account settings or contact us at the email below.

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies, third-party advertising cookies, or any cookies related to Pinterest data.

10. Children's Privacy

Pibbin is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@pibbin.com.