In short
- We only access the Pinterest data needed to show your boards and analytics and to publish pins you approve.
- Your Pinterest access token is encrypted and stored in a secure cookie in your own browser. We do not keep a copy on our servers.
- Your drafts and settings are saved in your own browser, not on our servers.
- Product details you enter are sent to our AI provider only to write drafts. Your Pinterest token and account data are never sent to the AI provider.
- We never sell your data, and we never share your store identity without your separate, explicit consent.
- You can disconnect and delete your data at any time. Steps are below.
This summary helps you read quickly. The full text below is what applies.
01Who is responsible for your data
GrowMyPin Studio is run by GrowMyPin, a sole proprietorship based in Delhi, India. GrowMyPin decides how and why your personal data is processed for the Studio. Contact: WhatsApp: wa.me/growmypin.
This policy covers the Studio website and app. GrowMyPin agency services have their own Data Privacy Policy at grow-my-pin-terms.vercel.app.
02Pinterest data we access
When you connect, Pinterest shows you the permissions on its own screen. Here is what each one is used for:
| Permission | What we read or do | Why |
|---|---|---|
| user_accounts:read | Your username, profile picture and account analytics (impressions, outbound clicks, saves, pin clicks) | To show who is connected, draw your dashboard and forecast, and measure view milestones |
| boards:read | Your board names and privacy setting | So you can choose which board an approved pin goes to |
| boards:write | Save a new pin to your board, and create a new board only when you ask us to | Pinterest requires this permission to add a pin to a board. We never rename, edit or delete your existing boards |
| pins:read | Results for pins published from the Studio | To show your strategy scoreboard |
| pins:write | Create a pin | Only after you approve a pin and confirm Publish |
We do not request access to your messages, followers, ads accounts, or the ability to edit or delete your existing pins. We do not edit or delete your existing boards.
Apart from the small numbers snapshot described in section 03, we do not store Pinterest data on our servers. We use Pinterest data only to provide the Studio to you. We do not sell it, rent it, use it to build advertising profiles, or share it with other users. We follow Pinterest's developer guidelines for handling Pinterest data.
03Other information we handle
| Information | Where it comes from | Where it is kept |
|---|---|---|
| Product title, product link, image link, niche, keywords, notes, target countries and target audience | You type it into the Studio | In your browser; sent to our AI provider only when you ask for drafts |
| Pin drafts, approvals and publish history | Created by you in the Studio | In your browser (local storage) |
| Studio settings (strategy, pins per day, countries) | Chosen by you | In your browser (local storage) |
| Pinterest access token | Given by Pinterest when you connect | Encrypted, in a secure HTTP-only cookie in your browser |
| A small snapshot of your own Pinterest numbers: total pin count, views in the last 30 days, and daily impressions for up to the last 90 days | The Pinterest API, after you connect | Supabase, linked to your account, only to show your dashboard and growth report and to work out your monthly view level for billing. Never shared, never sold, never sent to the AI provider. Deleted when you ask us or delete your account |
| Account details: name, email, WhatsApp number and password | You enter them when you create an account | Supabase (our database and login provider). Passwords are stored only as secure hashes by Supabase |
| Offer and slot form answers: where you sell, shop links, sales goal, how long you can wait, Pinterest profile link, phone number | You enter them in the Reserve my slot form | Supabase, to prepare your slot and contact you about it |
| Visit statistics: a random visitor ID, the page opened, the website that sent you, country, device type (mobile or desktop) and whether you stayed 10 seconds | Created automatically when you open our pages | Supabase. We do not store your IP address and do not use third party analytics |
| Notification subscription (only if you turn on notifications) | Your browser, after you allow notifications | Supabase, so we can send you messages about your account. Turn it off any time in your browser settings |
| Messages we send you from GrowMyPin (text and images) | Written by our team | Supabase, so they can show in the app until you read them |
| Public pins of the Pinterest profile link you give us | Pinterest's public RSS feed for that profile (only public pins), or the Pinterest API after you connect | Not stored. Shown only to you on your home page |
| Basic technical logs (time of request, error messages) | Created automatically by our hosting | With our hosting provider, for a short time, to fix problems |
| Payment details for paid plans | You enter them with Razorpay | With Razorpay. We see the payment status and ID, not your full card or bank details |
The free Try it demo on our website runs entirely in your browser. Nothing you type in the demo is sent to us.
04How we use information
- To connect your Pinterest account and keep you signed in.
- To write pin drafts for the products you enter.
- To publish pins you approve, to the board you choose.
- To show your analytics, forecasts, strategy results and view milestones.
- To bill paid plans and send receipts.
- To keep the Studio secure, prevent spam and fix errors.
- To answer your messages and complaints.
We process your data based on your consent when you connect your Pinterest account and use the Studio, and to perform our agreement with you. You can withdraw consent at any time by disconnecting.
05AI processing
To write drafts, we send the product details you entered (title, image link, niche, keywords, notes, countries, audience and chosen strategy) to our AI provider, Anthropic. The AI reads them and returns draft text.
For the free growth report, we also send the shop link you give us and the public text we can read from that shop page. The AI returns an estimate of extra views. If your Pinterest is connected, our own server adds your current views to that estimate, so your Pinterest numbers never reach the AI.
- Your Pinterest access token, analytics and account details are never sent to the AI provider.
- Do not put personal information about customers or other people in product notes.
- We do not use your content to train AI models.
07Cookies and browser storage
| Name | Type | Purpose | How long |
|---|---|---|---|
| gmp_session | Secure, HTTP-only cookie | Keeps your encrypted Pinterest access token so you stay connected | Up to 60 days, or until you disconnect |
| gmp_state | Secure, HTTP-only cookie | Protects the Pinterest sign in from forgery | 10 minutes |
| gmp_studio_drafts_v1 | Local storage | Your pin drafts and publish history | Until you clear them |
| gmp_studio_settings_v1 | Local storage | Your strategy, countries, audience and pins per day | Until you clear them |
| gmp_board | Local storage | The last board you chose | Until you clear it |
| gmp_user | Secure, HTTP-only cookie | Keeps you logged in to your GrowMyPin account (encrypted) | Up to 1 year (renewed when you visit), or until you log out |
| gmp_next | Secure, HTTP-only cookie | Remembers which page to bring you back to after you connect Pinterest | 10 minutes |
| gmp_in | Cookie (no personal data inside) | Tells our pages you are logged in, so you skip the landing page | Same as gmp_user |
| gmp_vid, gmp_sid | Local storage | Random IDs used to count visits and visits that end without any action (bounce rate). They do not contain your name or email | Visitor ID until you clear it; visit ID 30 minutes |
We do not use advertising cookies or third party tracking cookies.
08How long we keep data
- Data in your browser stays until you clear it, disconnect, or clear your browser data.
- Account details, form answers and your Pinterest numbers snapshot stay while your account is active, and are deleted within 15 days when you ask us to delete them.
- Hosting logs are kept for a short time to fix problems and are then deleted by our provider.
- Payment records are kept as long as Indian tax and accounting law requires.
If we add server features in the future, such as scheduling approved pins to post on later days, we may need to store your Pinterest connection on our servers in encrypted form. We will update this policy and ask for your permission before doing so.
09Your rights and choices
Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can ask us to:
- Tell you what personal data we hold about you and how it is used.
- Correct or update it.
- Delete it.
- Stop processing it by withdrawing your consent.
- Hear your complaint (grievance) and respond to it.
Send requests to WhatsApp: wa.me/growmypin. We will respond within 15 days.
10How to disconnect and delete your data
- Disconnect in the Studio: click Disconnect at the top of the dashboard. This deletes the session cookie with your access token.
- Remove the app in Pinterest: open Pinterest settings, go to the apps section, and remove GrowMyPin Studio. This cancels the token on Pinterest's side.
- Delete drafts and settings: use Clear done in the Studio, or clear site data for the Studio in your browser settings.
- Ask us to confirm: message us and we will confirm deletion of anything we hold, such as payment records we are not legally required to keep.
You stop using the Studio and want everything gone.
Do all three: Disconnect, remove the app in Pinterest, and clear site data. Pins already published stay on your Pinterest account until you delete them there.
11Security
- All traffic uses HTTPS.
- Your access token is encrypted with AES-256-GCM before it is stored in your browser cookie.
- Cookies holding your session are HTTP-only and secure, so page scripts cannot read them.
- No method is perfectly secure. If we learn of a breach affecting your data, we will notify you and the authorities as the law requires.
12Children
The Studio is for businesses and is not meant for anyone under 18. We do not knowingly collect data from children.
13Changes to this policy
We may update this policy. If the change is significant, we will show a notice in the Studio before it applies, and update the date at the top of this page.