Privacy Policy
Last updated: April 1, 2026
1. Introduction
PetalBoard (“we”, “our”, or “us”) operates the website petalboard.com and provides an AI-powered Pinterest scheduling service for Etsy sellers (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
2. Information We Collect
Account information. When you register, we collect your email address and a hashed password. If you sign in via a third-party provider (Google, etc.), we receive the profile information that provider shares.
Pinterest data. When you connect your Pinterest account via OAuth, we store access tokens and retrieve boards, pins, and profile information necessary to schedule and publish content on your behalf. We never post to Pinterest without your explicit instruction.
Etsy shop data. If you connect your Etsy shop, we read your public listing information (titles, images, descriptions) to help generate pin content. We do not store Etsy payment or customer data.
Usage data. We collect logs of actions you perform in the Service (pins scheduled, campaigns created, credits used) to operate the Service and detect abuse.
Payment data. Payments are processed by Stripe. PetalBoard never sees or stores your full card number. We receive limited billing information (last four digits, expiry) from Stripe for display purposes only.
3. How We Use Your Information
- To provide, operate, and improve the Service
- To authenticate you and maintain your session
- To schedule and publish pins to Pinterest on your behalf
- To generate AI-powered captions and images using your brand context
- To send transactional emails (confirmations, billing receipts)
- To detect fraud, abuse, and security incidents
- To comply with legal obligations
We do not sell your personal data. We do not use your data to train AI models without your explicit consent.
4. Third-Party Services
We share data with the following third parties only as necessary to operate the Service:
- Pinterest — to publish and manage pins on your behalf via the Pinterest API.
- Supabase — our database and authentication provider (hosted in the EU/US).
- Cloudflare R2 — object storage for images you generate or upload.
- Stripe — payment processing.
- OpenRouter / fal.ai / xAI — AI inference providers used to generate captions and images.
Each of these providers has their own privacy policy. We encourage you to review them.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.
6. Cookies
We use strictly necessary session cookies to keep you logged in. We do not use advertising cookies or third-party tracking pixels.
7. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, email us at support@petalboard.com.
8. Security
We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Children
PetalBoard is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us to have it removed.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the Service. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
11. Contact
Questions about this policy? Email us at support@petalboard.com.