Privacy Policy | Pinitup

1. What this policy covers

Pinitup is a platform for discovering, saving and using AI prompts and creative references. This policy applies when you browse Pinitup, create an account, save content, use search, or otherwise interact with the service.

2. Data we collect

Account information: when you sign in with Google, we may receive your Google account identifier, name, email address and profile image so we can create and maintain your Pinitup account.
Product activity: content you save, boards you create, prompts you view or copy, searches you submit, shares you initiate, and other actions needed to provide the features you use.
Analytics data, if you accept analytics: page views and product events such as prompt views, copies, saves, shares and searches. When you are signed in, analytics may be associated with your internal Pinitup user ID and account role. We do not send your name or email address to PostHog from our analytics integration.
Technical and security information: request information, IP address, browser/device information, authentication events and security logs may be processed by Pinitup and its infrastructure providers to operate and protect the service.
Admin content data: authorised administrators may upload images and content information to Pinitup's AI Prompt Creator. These materials may be processed by our AI provider to generate draft prompt content.

3. How we use data

to provide authentication, accounts, saved collections and other requested features;
to display, search and manage prompt content;
to prevent abuse, secure accounts and protect the platform;
to understand how Pinitup is used and improve the product when you have accepted analytics;
to operate internal content-generation and publishing tools for authorised administrators; and
to comply with applicable legal obligations.

Where applicable law requires consent for a particular use of personal data or browser storage, we request that consent before enabling the relevant processing.

4. Analytics

Pinitup uses PostHog for product analytics only after you choose Accept & Continue. We use explicit product events rather than session recording or automatic capture. You can reject analytics or change your choice at any time using the privacy settings icon shown on Pinitup.

5. Service providers

We use specialist service providers to operate Pinitup. Depending on the feature you use, these may include:

Google for Google sign-in and, for authorised admin features, Gemini AI processing;
PostHog for optional product analytics;
Vercel for web application hosting and delivery;
Render for API hosting; and
MongoDB Atlas for application data storage.

These providers process data on our behalf or provide services directly to you under their own terms and privacy practices where applicable.

6. Sharing and selling data

We do not sell your personal data to advertisers. We share data only where needed to provide Pinitup, work with the service providers described above, protect the service, comply with law, or where you direct us to do so.

7. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing your account, maintaining security, resolving disputes and meeting legal obligations. Analytics retention is also subject to our PostHog project settings. Internal AI Prompt Creator source assets and drafts are staging data and may be removed after they are no longer operationally required.

8. Your choices and rights

You can accept or reject optional analytics at any time from the privacy settings icon. Depending on the law that applies to you, you may also have rights relating to access to information about your personal data, correction, erasure, grievance redressal, withdrawal of consent and nomination of another person to exercise rights on your behalf.

We will provide an account privacy/contact route before Pinitup opens to the public so these requests can be submitted directly.

9. Security

We use technical and organisational safeguards designed to protect Pinitup data, including secure authentication cookies, CSRF protection, rate limiting, access controls and server-side handling of private API credentials. No online service can guarantee absolute security.

10. International processing

Some of our service providers may process or store data outside your country. Where required, we take reasonable steps to use providers and arrangements that support applicable data-protection requirements.

11. Changes to this policy

We may update this policy as Pinitup develops. The latest version will always be published on this page with its updated date.

For details about browser storage, see our Cookie Policy.