Your data, in plain language

365 Pinterest is operated by Anjum Labs (founded 2025). 365 Pinterest is an independent product and is not affiliated with, endorsed by, or sponsored by Pinterest, Inc.

Questions about this policy, or about your data, go to support@365pinterest.com.

We collect only what the product needs to work. We do not buy data about you, and we do not track you across other websites.

Your account

• Email address, name, and profile image — the details you sign up with.
• Password — stored only as a bcrypt hash. We never store or see your plain-text password.
• Google sign-in (optional) — if you sign in with Google, we store your Google account id so we can recognise you next time. We do not read your Gmail, Drive, or any other Google data.
• Account details — your role, credits and usage counters, last login time, and last IP address.

Your sessions

• Sign-in sessions — a session token, its expiry, and the IP address and browser (user agent) it came from, so we can keep you signed in and spot suspicious logins.

Connected Pinterest accounts

• Your Pinterest user id, username, and the scopes you granted when you connected.
• Pinterest access and refresh tokens, stored encrypted (see section 5). They are what let the scheduler publish pins on your behalf.
• A cached copy of your boards (id, name, description, privacy, pin count), so the dashboard loads fast.
• Your pins — title, description, image URL, destination URL, status, scheduled time, published time, and the last publish error if one failed.
• Daily analytics snapshots per pin — impressions, saves, clicks, and outbound clicks.

Connected WordPress sites (optional)

• Site URL, site name, and username, plus your WordPress application password, stored encrypted (see section 5).
• Blog posts written for that site — title, AI-written content, excerpt, tags, and the published WordPress post id and URL.

API keys (optional)

• The key's name, its SHA-256 hash, a short prefix so you can tell keys apart, last-used time, request count, and revocation time. The full key is shown to you once at creation and never stored — we cannot recover it for you.

We do not collect payment card details in this app, and we do not collect precise location, contacts, or anything from your device beyond the session and usage details above.

Your data is used only to operate the features you asked for: signing you in, scheduling and publishing your pins, showing your boards, queue, and analytics, and generating and publishing blog posts to your connected WordPress sites.

• We do not sell your data to anyone, ever.
• We do not show ads, and we do not share your data with advertisers.
• We do not use your pins, blog posts, or Pinterest content to train AI models.
• We do not share your data with any other party except the processors listed in section 4, and only as needed to run the service.

These services handle your data on our behalf, only as needed to run 365 Pinterest:

• Neon — our Postgres database, hosted in Singapore. It stores your account, pins, boards, and settings.
• Cloudflare — hosts the app (Workers) and powers the AI that writes blog drafts and generates cover images (Workers AI). Your blog topics and pin images are sent to Cloudflare only when you use those features.
• Cloudinary — stores pin images you upload.
• Pinterest (API v5) — the pins, boards, and analytics you see come from, and are published to, your own Pinterest account. Pinterest's own privacy policy applies to data held by Pinterest.
• Your WordPress site — blog posts are published to the site you connected, using the application password you provided.
• Google — only if you choose Google sign-in, and only to verify who you are.

• Pinterest access and refresh tokens and WordPress application passwords are encrypted with AES-256-GCM before they are stored, and are never returned to the browser, never logged, and never shared.
• API keys are stored only as SHA-256 hashes — the full key is never stored anywhere.
• Passwords are stored only as bcrypt hashes — never in plain text.
• All traffic to and from the app uses HTTPS.

No system is perfectly secure. If you believe your account has been compromised, email support@365pinterest.com and revoke your API keys from the dashboard.

Your data is kept while your account is active, so your pins, schedule, and settings are there when you return.

• Disconnecting a Pinterest account in the dashboard removes its stored access and refresh tokens from our systems, so we can no longer publish on its behalf. Pins already published to Pinterest stay on Pinterest — delete those from Pinterest itself.
• Disconnecting a WordPress site removes its stored application password. Blog posts already published to WordPress stay on your site.
• Revoking an API key stops it working immediately.

To delete your account and all of your data, email support@365pinterest.com from the email address on your account, with the subject “Delete my account”. We will delete your account and its data within 30 days and confirm by email when it is done.

• Session cookie — keeps you signed in. It lasts 7 days, then you sign in again.
• Theme preference — your light/dark choice is saved in your browser's local storage (not a cookie) and never leaves your device.

We do not use advertising or cross-site tracking cookies, and we do not run third-party analytics on this site.

For privacy questions, data deletion, or anything else, contact us at support@365pinterest.com. You can also read the developer docs at 365pinterest.com/developers.