Privacy Policy

1. Who we are (the data controller)

Pinly is provided by Threadify, based in the United Kingdom ("we", "us", "our"). For any question about this policy or your personal data, contact privacy@threadify.pro.

2. What personal data we collect

Account data

• Email address and hashed password (or Google sign-in identifier)
• Account timestamps (created, last sign-in)

Content you create

• Amazon product URLs you submit and the resulting pin drafts
• AI-generated titles, descriptions, and images stored against your account
• Pinterest board connections and posted pin metadata
• Automation schedules and their inputs

Billing data

• Subscription status, plan, and trial dates. Card details are collected and stored by Stripe — we never see or store your full card number.

Technical & usage data

• IP address, browser, device, and referrer (server logs, kept 30 days)
• Product analytics events (page views, feature usage) used to improve Pinly
• Error reports (stack traces, request IDs) when something breaks

3. Why we use your data (lawful basis)

• Contract — to provide the Pinly service you signed up for (accounts, publishing pins, billing).
• Legitimate interests — to keep the service secure, prevent abuse, debug errors, and understand how Pinly is used in aggregate.
• Consent — for non-essential analytics and marketing cookies (see the Cookie Policy). You can withdraw consent at any time.
• Legal obligation — to keep tax and billing records as required by UK law.

4. Who we share your data with (sub-processors)

We only share what's needed to run Pinly. Each provider is bound by a data-processing agreement.

• Supabase — database, authentication, file storage.
• Cloudflare — hosting, CDN, DDoS protection.
• Stripe — subscription billing and payment processing.
• Resend — transactional and account emails.
• Pinterest — when you connect an account and publish pins.
• AI providers (via the Lovable AI Gateway, e.g. Google, OpenAI) — to generate copy and images from the product data you submit.
• Amazon product data providers — to fetch public product information from the URLs you submit.

We do not sell your personal data and we do not use your content to train third-party AI models beyond what is strictly required to return a result for your request.

5. International transfers

Some of our sub-processors are based outside the UK/EEA (for example, in the United States). Where that is the case, transfers are protected by the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an equivalent safeguard approved by the ICO / European Commission.

6. How long we keep your data

• Account & content — for as long as your account is active.
• Deleted accounts — removed within 30 days, except where we must keep records for legal reasons (e.g. tax invoices, up to 7 years).
• Server logs — 30 days.
• Analytics — up to 14 months in aggregated form.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent for optional processing at any time
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority

To exercise any of these rights, email privacy@threadify.pro. We respond within one calendar month.

8. How we protect your data

• Encryption in transit (HTTPS/TLS) for all traffic
• Encryption at rest for the database and file storage
• Row-level access controls so users can only see their own data
• Least-privilege access for staff and short-lived credentials

9. Children

Pinly is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will remove it.

10. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you by email before the changes take effect.

11. Contact

Threadify · United Kingdom
Email: privacy@threadify.pro