Privacy Policy

Your privacy is important to us. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Who We Are

URL2Pin (“URL2Pin”, “we”, “us”) provides tools to help you create Pinterest pin images and metadata (title/description/alt text) from URLs you provide, and to connect and manage Pinterest accounts.

URL2Pin is operated by Aristomenis Georgiopoulos, based in Greece, who is the data controller for the personal data described in this policy. You can reach us at hello@url2pin.com.

Information We Collect

Account information: email address and authentication/session information.
URLs and content you provide: URLs you paste into the app, page metadata we fetch from those URLs, and any text you input or edit (titles, descriptions, overlays).
Pinterest connection data: data needed to connect your Pinterest account(s) (tokens), identifiers, and basic account info (e.g., username) used to display connected accounts in the app.
Uploads: files you upload (e.g., CSV files, your own images for “photo + text overlay” pins).
Generated content: pins you generate, including image URLs, titles, descriptions, hashtags, alt text, styles, and scheduling metadata (if you schedule).
Payment-related information: subscription status and billing identifiers needed to provide service. We do not store full card details on our servers; payments are handled by our billing provider.
Usage, logs, and analytics: operational logs and product usage metrics used for security, abuse prevention, troubleshooting, and improvement.

How We Use Your Information

To provide, maintain, and improve the service (including generating pins and saving your history).
To connect to Pinterest on your behalf when you request it and to display/manage connected accounts.
To process payments and manage subscriptions, plan limits (including per billing period or monthly allowances), and account access.
To communicate with you about your account, support requests, and important service updates.
To ensure security, prevent abuse, and enforce usage limits.

Why We Are Allowed To Use Your Data

If you are in the European Economic Area or the UK, we must have a legal basis for each thing we do with your data. Ours are:

To provide the service you signed up for (performance of a contract): creating your account, generating pins from the URLs you give us, storing your pins and history, connecting your Pinterest account, and scheduling or publishing when you ask us to.
To take payment and manage your plan (performance of a contract): subscription status, billing identifiers, and your plan allowances.
To keep billing records (legal obligation): tax and accounting records we are required to retain.
To email you about your own account (performance of a contract): billing notices, support replies, service updates, and reports on how your own pins performed.
To send occasional news and offers about URL2Pin (legitimate interests): for example new features or a seasonal deal. Every such email has an unsubscribe link, and unsubscribing stops them for good.
To keep the service secure and working (legitimate interests): operational logs, abuse prevention, rate limits, and diagnosing faults. Our interest is running a service that is not abused; we use the least data that achieves it.
To understand how the product is used and improve it (legitimate interests): aggregate usage figures, such as how many pins are generated or published.
To record how you first found us (legitimate interests): on your first visit we store the referring site and landing page in your browser, and attach it to your account if you sign up. It tells us which channels bring customers and, where you arrived through a partner link, who to credit. You can ask us to delete it.
Analytics and marketing tools (consent): Google Analytics, Google Tag Manager and Reddit load only if you accept cookies, and you can withdraw that at any time using "Cookie settings" in the footer.

Where we rely on legitimate interests you can object, and we will stop unless we have compelling grounds to continue. Email hello@url2pin.com.

Third-Party Services We Use

We use third-party services to run URL2Pin. Depending on what you do in the app, your data may be processed by:

Dodo Payments (billing): to process subscription payments and manage subscription status.
Supabase (database, storage, authentication): to store account/usage data, generated pin data, and files/images you upload or generate.
OpenAI: to generate text such as pin titles, descriptions, overlays, keywords and alt text. Where alt text is written from the finished image, the image is sent to OpenAI for that purpose.
Kie.ai (which runs Google image models on our behalf): to generate pin images from the product or article details you supply.
Pinterest API: to connect your Pinterest accounts, fetch boards, and publish/schedule pins when you request it.
Resend (email delivery): to send account, billing and product emails. Your email address and the contents of those messages pass through Resend.
Netlify (website hosting) and Render (application hosting): to serve the site and run the service, including the scheduler that publishes your pins.

Most of these providers are based in, or process data in, the United States. Where your personal data is transferred outside the European Economic Area, we rely on the transfer safeguards offered by those providers, such as the European Commission's Standard Contractual Clauses.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, and help the app function properly. With your consent we also use analytics and marketing tools (including Google Analytics, Google Tag Manager, and Reddit) to measure traffic. Affiliate referrals use a first-party referral parameter stored in your browser (not a third-party affiliate tracker). You can accept or reject non-essential cookies in the banner on our site, or use "Cookie settings" in the footer to change your choice. Rejecting non-essential cookies does not block sign-in or core product features. Disabling all cookies in your browser may prevent sign-in from working.

Data Sharing

We do not sell your personal information. We share data only as needed to provide the service (for example with the third parties above), to comply with law, or to protect our rights and users.

Data Retention

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data, subject to legal and operational requirements.

How We Protect Your Data

Data is encrypted in transit, access to our systems is restricted to the accounts that need it, and Pinterest access tokens are stored so that only the service can use them to act on your behalf. We also publish a security policy describing how to report a vulnerability, including a safe harbour for good-faith research. No service can promise perfect security, and if a breach ever affects your personal data we will tell you and the relevant authority as the law requires.

Children

URL2Pin is a business tool and is not intended for children. You must be at least 16 years old to use it, or older if your country sets a higher age for consenting to online services. We do not knowingly collect data from children. If you believe a child has created an account, email hello@url2pin.com and we will delete it.

Your Rights

If you are in the European Economic Area or the UK, you have the following rights over your personal data:

Access — ask for a copy of the data we hold about you.
Rectification — have inaccurate data corrected.
Erasure — ask us to delete your data.
Restriction — ask us to limit how we use it.
Portability — receive your data in a portable format.
Objection — object to processing based on our legitimate interests.
Withdraw consent — where we rely on consent, such as analytics cookies, you can withdraw it at any time using “Cookie settings” in the footer. This does not affect processing carried out before you withdrew it.

To exercise any of these, email hello@url2pin.com. You also have the right to complain to a data protection authority. In Greece this is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr. You may also complain to the authority in the country where you live.

Contact Us

For privacy questions, requests, or concerns, email hello@url2pin.com.

This policy may be updated from time to time. Last updated: 20 October 2026