Privacy Policy

1. Introduction & Overview

ChatCoat, operated by Sami Ullah, is a SaaS social media management and scheduling platform for businesses, creators, and marketers.

ChatCoat allows authorized users to securely connect their Pinterest accounts through Pinterest OAuth 2.0. From the ChatCoat dashboard, users can view their available Pinterest boards and create and publish Pins to a selected board. ChatCoat can also schedule Pinterest content for future publication. Pinterest data is accessed only on behalf of the authenticated user and only for the features they request. Users can disconnect their Pinterest account from ChatCoat at any time.

3. Information We Access and Collect from Pinterest

Our access to your Pinterest account is strictly limited to the permissions you explicitly grant during the OAuth authorization process. We may access and collect:

• Profile & Account Information: Pinterest username, profile display name, profile image URL, and account type (accessed via user_accounts:read) to verify and identify your connected account in your workspace.
• Board Details: Board names, board identifiers (IDs), and board privacy statuses (accessed via boards:read and boards:write) to allow you to choose destination boards and manage Pins within your Pinterest boards.
• Pin Content & Media Metadata: Pin titles, descriptions, destination links, image/video media URLs, and published Pin IDs (accessed via pins:read and pins:write) associated with Pins created or managed through ChatCoat.
• OAuth Access Credentials: OAuth 2.0 access tokens, refresh tokens, token expiration timestamps, and granted scope lists required to maintain an active, secure connection.

4. How We Use Pinterest Data

We use Pinterest data solely for the following authorized functional purposes:

• Displaying your connected Pinterest account profile and available boards in your dashboard.
• Creating, uploading, and publishing Pins directly to your designated boards upon your instruction.
• Scheduling Pins for automated future publication times.
• Managing and deleting Pins created or managed through ChatCoat when requested by you or when a scheduled campaign expiration timer expires (where permitted by the Pinterest API).
• Tracking publication success and maintaining operational delivery logs for campaign tracking.

5. Data Storage & Token Security

We implement industry-standard technical and organizational security measures to protect your Pinterest data:

• Encrypted Credentials: All Pinterest OAuth access tokens and refresh tokens are encrypted at rest in secure database infrastructure.
• Secure Transmission: All data exchanged between your browser, ChatCoat servers, and the Pinterest API is transmitted using HTTPS / TLS encryption.
• Temporary Media Staging: Uploaded Pin image and video media is temporarily stored to facilitate publishing and is purged once processing and delivery to Pinterest are complete.

6. Data Retention

We retain Pinterest connection records, access tokens, and campaign metadata only for as long as your Pinterest account remains connected in your ChatCoat workspace, or until you request deletion. When you disconnect your Pinterest account, the corresponding access tokens and connection data are purged from our active records.

7. Data Sharing and No-Sale Policy

ChatCoat does NOT sell, rent, trade, or monetize your Pinterest account data or media content to any third party, data broker, or advertising network.

We share Pinterest data strictly with:

• Official Pinterest API endpoints to perform your requested publishing and management actions.
• Trusted cloud hosting infrastructure providers operating under strict confidentiality and security terms.
• Law enforcement or regulatory authorities only if required by a valid legal subpoena or court order.

9. Data Deletion Requests

You have the right to request permanent deletion of all your stored ChatCoat account and Pinterest-related data.

To request complete deletion, email us at support@chatcoat.com with the subject line "Pinterest Data Deletion Request" or visit our Data Deletion Instructions Page. Verified deletion requests are processed within 30 days.