Privacy Policy

Pinwing (“Pinwing”, “we”, “us”) is a tool that helps sellers and creators turn Etsy listings, blog articles, and their own images and videos into Pinterest pins and Instagram posts, using AI-generated copy, generated designs, and scheduling. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.

If you have any questions, contact us at hello@pinwing.app.

We collect the following categories of data, only as needed to provide the service:

• Account information – when you sign in with Google, we receive your name, email address, and profile image. When you sign in with an email link, we only have your email address.
• Etsy data – if you connect your Etsy shop, we access your shop and listing data (titles, descriptions, prices, tags, images, and listing URLs) so you can import listings into a workflow.
• Gumroad data – if you connect Gumroad, we read your profile name and your published products (name, description, price, images, tags and link) so you can turn them into pins. We never change anything in your Gumroad account and don't read your sales or customers.
• Pinterest data – if you connect Pinterest, we access your boards and publish pins you have explicitly approved. We do not store Pinterest data beyond what is needed to provide the service.
• Signing in with Pinterest – we store your Pinterest account ID and username to recognize you. Pinterest does not share your email address; if you add one, it is used for receipts, support replies and as a backup way to sign in, and only after you confirm it from the link we send.
• Instagram data – if you connect an Instagram professional account, we receive and store your Instagram username, your Instagram account ID and app-scoped user ID, and an access token. We use them only to publish the posts you schedule, and we store the ID Instagram assigns to each published post. We do not read your followers, messages, comments, or other posts.
• Your uploads – images and videos you upload to schedule as pins or posts, and any cropped versions we make of them for Instagram's size rules. Videos are deleted from our storage once the Reel has been published.
• AI usage – text you choose to send for copy generation, and when you ask for help writing copy for an uploaded image or video, that image or a still frame from the video, is processed by Anthropic (Claude) to produce pin copy and captions. If you set up “My voice”, the example texts and chat answers you give are stored with your account and processed by Anthropic to describe your writing style; you can delete them at any time in Settings.
• Generated content – article/listing data you import, pins Pinwing generates, schedules you configure, and workflow history.
• Layout suggestions – if you suggest a layout, we store the screenshots and note you send, and the status we give it. Screenshots are only a reference for our team: they are never used in a pin or shown to other users. We delete them once we've decided on the suggestion (built or not a fit), or with your account if that comes first.
• Support requests – when you write to us from the Help page or the contact form, or reply to our support emails, we store your messages, your name and email address (contact form), any screenshots you attach, and our replies. To save you explaining it, each request also records your plan, your account email, the project you last opened, whether Pinterest is connected, and when you signed up.
• Usage data – basic counters (pins generated, pins scheduled, AI tokens used, storage used) used to operate the service and enforce plan limits.

We use your information solely to provide and improve Pinwing. Specifically, to:

• Authenticate you and maintain your account.
• Import your Etsy listings and generate pin images and copy.
• Schedule and publish pins to Pinterest after your explicit per-pin approval.
• Publish posts to your Instagram account at the times you schedule. We never post anything you have not scheduled.
• Operate, secure, and troubleshoot the service, and enforce plan limits.
• Answer your support requests.

Pinwing integrates with third-party platforms. Your use of those integrations is also governed by their terms and privacy policies:

• Google – used for sign-in (OAuth).
• Etsy – used to import your shop's listing data via the Etsy Open API. The term “Etsy” is a trademark of Etsy, Inc. Pinwing uses the Etsy API but is not endorsed or certified by Etsy, Inc.
• Gumroad – used to read your products when you connect it. Pinwing is not affiliated with or endorsed by Gumroad.
• Pinterest – used to read boards and publish approved pins. Pinwing is not affiliated with or endorsed by Pinterest.
• Instagram (Meta) – used to publish the photos, carousels, and Reels you schedule, through the Instagram API with Instagram Login. Pinwing is not affiliated with or endorsed by Meta or Instagram.
• Anthropic (Claude) – used to generate pin copy and captions from the text and images you submit, and to help us understand support requests and draft our replies (every reply is reviewed and sent by a person).
• Telegram – when you send a support request or reply, a notification with your email address, plan, subject, and the start of your message is sent to the Pinwing team through a Telegram bot.
• Resend – used to email you sign-in links and our replies to your support requests.
• Cloudflare Turnstile – checks that the contact form is being sent by a person, not a bot. Cloudflare processes your IP address, browser user agent and connection details for this check only, and says it doesn't use them to identify, profile or target anyone.
• Sentry – used to record errors in the app so we can fix them: the error, where it happened, your browser type and a pseudonymous account id. It sets no cookies, and we configure it not to send cookies, request contents, email addresses or the text you write.
• PostHog and Google Analytics – used for product analytics, as described below under “Analytics and cookies.”
• Infrastructure – we host the application on Vercel, store data in a PostgreSQL database (Neon), and store generated images and your uploads in Vercel Blob storage.

We use PostHog and Google Analytics to understand how Pinwing is used – for example, which pages are visited, which features are used, and general device/browser information. These tools set cookies or similar identifiers in your browser and may process your IP address to approximate your general location.

We only load these tools after you accept the cookie banner shown on your first visit. If you reject or don't respond, they stay off. You can change your choice at any time using the “Cookie preferences” link in the footer (or in your account menu, if signed in).

This usage data is tied to a pseudonymous identifier, not directly to your name. If you are signed in, we link it to your account so we can understand product usage and improve the service; we do not sell this data.

PostHog processes this data in the EU. Google Analytics is provided by Google; see Google's Privacy Policy for how Google itself handles this data.

We only use data accessed through a connected account to provide the service to the same user who authorized the connection. We do not sell it, and we do not combine it across users.

Consistent with platform requirements, we do not cache or store platform data longer than is reasonably necessary to provide the service. Listing data imported into a workflow is stored so you can build and schedule pins; you can delete it at any time by deleting the workflow.

Access tokens for connected accounts and any Anthropic API key you provide are encrypted at rest using AES-256-GCM. We restrict access to your data to the systems and personnel needed to run the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You can disconnect Etsy, Gumroad, Pinterest, Instagram, or your AI key at any time from Settings, which removes the associated tokens. You can delete individual workflows, generated pins, and uploads from within the app. Support requests and their screenshots are kept until you delete your account; contact-form requests (sent without an account) are kept until you ask us to delete them.

If you remove Pinwing from your Instagram account in Instagram's settings, or ask Instagram to delete the data Pinwing received, we automatically delete your Instagram connection (username, IDs, and access token) and the IDs Instagram assigned to your posts, and cancel any posts that have not been published yet. You will get a confirmation code you can check at pinwing.app/data-deletion.

You can delete your account and all associated data at any time from Settings → Account, or by contacting us at hello@pinwing.app. We will delete your data except where we are required to retain it to comply with legal obligations.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Pinwing is not directed to children and is intended for users who are at least 16 years old. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

Questions about this policy or your data? Email us at hello@pinwing.app.