Privacy Policy

ZeroBasedUK PinBot V2 · Effective 10 September 2026

ZeroBasedUK PinBot V2 (the “app”) is a private, first-party content-management and publishing tool operated by ZeroBasedUK. It helps the owner review, schedule and publish original K.D. Publishing and ZeroBased UK product content to the owner’s own authorised Pinterest accounts and boards. It is not offered for use by the public.

Information the app handles

When a Pinterest account is connected through Pinterest OAuth, the app stores the access and refresh tokens needed to keep that authorised connection working, the connected Pinterest username, and the minimum board identifiers and names needed for board selection. For Pins, it stores the selected product, image, board identifier, title, description, destination URL, scheduling and approval state, Pinterest Pin identifier where applicable, and limited operational or error logs needed for deduplication, troubleshooting and audit.

The app does not receive or store the user’s Pinterest password. Pinterest sign-in and consent take place on Pinterest. The app does not sell personal information, build advertising profiles, scrape Pinterest, or use Pinterest data for unrelated purposes.

How the information is used

The information is used only to authenticate the owner’s Pinterest accounts, load available boards, present individual Pin previews for review and approval, send an approved Pin through Pinterest’s API, prevent accidental duplicates, and keep a limited record of publishing outcomes. Each new Pin draft is unapproved by default and cannot enter the publishing path until the owner approves that individual Pin.

Lawful basis

Where UK data-protection law applies, processing is based on the owner’s consent when authorising Pinterest OAuth and on the legitimate interests of securely operating this private publishing tool. OAuth permission can be withdrawn at any time.

Storage, security and cookies

The app is hosted on Railway. Operational data is stored server-side on a persistent application volume. Connections use HTTPS in transit, the dashboard is password-protected, OAuth tokens are not exposed to the browser, and uploaded filenames are randomised. No online service can guarantee absolute security, but access is restricted and only the minimum information needed for operation is retained.

The app uses a strictly necessary, HTTP-only session cookie to keep an authorised dashboard session signed in. It does not use advertising or cross-site tracking cookies.

Retention and deletion

Pinterest OAuth tokens are retained while the account remains connected and are removed from the app when the owner disconnects it. Product, draft, Pin-result and limited audit information is retained while needed to operate the service, prevent duplicates and investigate failures. Information can be corrected or deleted on request unless retention is necessary for security, legal obligations or an active operational record. Residual copies may remain temporarily in protected backups until they are overwritten through the normal backup cycle.

Disconnecting Pinterest

The owner can disconnect a Pinterest account from the app, which removes the app’s stored production OAuth token without deleting or changing the Pinterest account. Access can also be revoked through Pinterest account settings. To request deletion of related app data, contact ZeroBasedUK using the address below.

Sharing and international processing

Information is shared only with service providers needed to run the app—principally Pinterest for OAuth and Pinterest API operations, and Railway for application hosting. These providers process information under their own terms and privacy arrangements and may process information outside the United Kingdom with applicable safeguards.

Your UK data-protection rights

Subject to applicable law, you may ask for access to personal information, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent where consent is the basis. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Contact

For privacy questions, access requests or deletion requests, email [email protected].

Changes to this policy

This policy may be updated when the app or legal requirements change. The effective date at the top will be revised when a material update is published.

Return to ZeroBasedUK PinBot