PRIVACY POLICY

This Privacy Policy explains how PinClick ("we", "us") collects, uses, and protects information when you use our software-as-a-service platform (the "Service").

1. Information we collect

• Account data: your email address and authentication details (via magic link).
• API credentials you connect: keys for your LLM provider, email platform, Pinterest app, and ClickBank. These are encrypted at rest (AES-256-GCM) and used only to operate the Service for you.
• Content & usage data: the niches, lead magnets, pins, and funnels you create, plus operational logs and analytics needed to run the Service.
• Lead/subscriber emails: when visitors opt in on a landing page you publish, we store that email and an attribution code to forward it to your connected email platform. You are the controller of those contacts.
• Payment data: processed by our Merchant of Record, Paddle. We do not store your full card details.

2. How we use information

• To provide, operate, and improve the Service.
• To authenticate you and secure your account.
• To call third-party APIs on your behalf using the keys you provide.
• To process payments and prevent fraud (via Paddle).
• To communicate service updates and support.

3. Sharing

We do not sell your personal data. We share data only with the sub-processors needed to run the Service: Supabase (database, auth, storage), Paddle (payments & tax), and the third-party APIs you choose to connect (your LLM provider, Kit, Pinterest, ClickBank). Each processes data under its own terms.

4. Data retention

We retain your data while your account is active. You can request deletion of your account and associated data at any time by contacting us; we will delete it except where retention is required by law or for legitimate business records.

5. Security

Connected API keys are encrypted at rest and never exposed back to the browser. Access is restricted by row-level security per workspace. No system is perfectly secure, but we take reasonable measures to protect your data.

6. Your rights

Depending on your jurisdiction (including under GDPR/CCPA), you may have rights to access, correct, export, or delete your personal data. To exercise these, contact us.

7. International transfers

Our infrastructure and sub-processors may store and process data outside your country. By using the Service you consent to such transfers, subject to appropriate safeguards.

8. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy; changes are posted here with a new "last updated" date.

10. Contact

Privacy questions or data requests: support@inautomode.com.