隐私协议 / Privacy Policy · Etsy → Pinterest Publisher

本应用（Etsy → Pinterest Publisher）是一款帮助你把自己选定的 Etsy 商品链接发布为 Pinterest Pin 的辅助工具。本协议说明我们收集哪些信息、为何收集、如何保存与保护，以及你可以如何行使自己的权利。请在使用本服务前完整阅读。

1. 我们收集的信息

1.1 你主动提供的信息

账号信息：用户名、密码、邮箱（选填）、昵称（选填）、手机号（选填）。密码不会以明文形式保存，我们只保存加盐后的不可逆摘要值。
发布内容：你在页面上提交的 Etsy 商品链接，以及你选择性填写的 Pinterest 画板 ID。

1.2 你在 Pinterest 授权后我们获得的信息

当你点击「连接 Pinterest」并在 Pinterest 页面确认授权后，Pinterest 会通过 OAuth 2.0 向我们返回：

Pinterest 访问令牌（access token）与刷新令牌（refresh token）；
你授权范围内的 Pinterest 用户名；
你在本应用中配置的目标画板 ID（board id）。

我们不会获得你的 Pinterest 密码，也无法读取你的私信、粉丝列表、或在授权范围之外的任何 Pinterest 内容。授权范围仅为 boards:read 与 pins:write。

1.3 使用过程中自动产生的记录

发布记录：Etsy 链接、商品标题、商品图片地址、目标画板 ID、Pinterest 返回的 Pin ID、发布时间与成功/失败状态。
技术日志：服务器处理请求时可能记录时间戳、IP 地址与 User-Agent，仅用于安全审计与故障排查。
登录令牌：登录成功后生成的随机令牌，保存在浏览器本地存储中，并在服务端以过期时间管理。

1.4 我们不会收集的信息

你的 Pinterest 或 Etsy 账号密码；
银行卡号、身份证件等支付或身份证明文件；
你在 Etsy 上的购物记录、订单或收货地址；
用于广告投放或用户画像的行为追踪数据。本应用未接入第三方广告、统计分析或用户画像 SDK。

2. 我们如何使用这些信息

目的	使用的数据
创建账号、验证身份、维持登录状态	用户名、密码摘要、邮箱、登录令牌
代表你调用 Pinterest API 创建 Pin	Pinterest 访问令牌、画板 ID、Etsy 商品信息
执行每日发布数量限制	发布记录（数量与状态）
排查故障、防范滥用、保障服务安全	技术日志、发布记录、错误信息
响应你的查询、更正与删除请求	账号信息、发布记录

我们不会将上述信息用于自动化决策、广告投放，也不会出售或出租给任何第三方。

3. Cookie 与浏览器本地存储

登录令牌保存在浏览器的 localStorage 中，仅用于在调用本应用接口时携带身份，不用于跨站追踪。
本应用不设置广告类、联盟类或第三方分析类 Cookie。
你退出登录时，该本地令牌会被立即清除。

4. 存储与安全

账号数据与发布记录保存在我们自有的 MySQL 数据库中；登录令牌与 Pinterest 授权令牌保存在 Redis 中，并带有有效期，长期不活跃会自动失效。
登录令牌每次使用都会自动续期；退出登录、禁用或注销账号时会立即失效。
密码以随机盐值加摘要的形式保存，服务端不保留明文。
我们建议通过 HTTPS 访问本服务，并会在部署时启用传输加密。请勿在不信任的网络环境下使用。
尽管我们会采取合理的技术措施，但互联网传输不存在绝对安全，我们无法承诺零风险。

5. 信息共享与第三方

我们不会出售、出租或交易你的个人信息。仅在以下必要情形下共享：

Pinterest, Inc.：在你授权后，为创建 Pin 而调用 Pinterest API v5，相关处理同时受 Pinterest 隐私政策约束。
Etsy：仅读取你提交的商品页面上的公开信息（标题、描述、价格、图片），不会访问需要登录的私有数据。参见 Etsy 隐私政策。
基础设施服务商：提供服务器、数据库与缓存托管的云服务商，仅按我们的指示处理数据。
法律要求：为遵守适用法律法规、司法或行政机关的有效要求而披露。

6. 数据保留期限

账号信息：在账号存续期间保留。
发布记录：用于发布数量统计与问题排查，保留至账号注销。
技术日志：一般不超过 30 天。
注销账号后，账号状态会被标记为「已删除」，登录令牌与 Pinterest 授权令牌立即失效并被移除，账号不再可用于登录。如需彻底物理删除数据，请通过第 9 节的方式联系我们。

7. 你的权利

访问与更正：可在应用页面查看当前账号信息；如需更正，请联系我们。
撤回 Pinterest 授权：在 Pinterest 账号设置的「已授权的应用」中撤销本应用，或在应用内重新授权其他 Pinterest 账号。
注销账号：在应用页面点击「注销账号」，系统会立即作废登录令牌并删除已保存的 Pinterest 授权令牌。
数据导出或删除：可通过第 9 节的联系方式提出，我们会在合理期限内处理。

8. 儿童隐私

本应用不面向 13 周岁以下儿童，我们不会有意收集儿童的个人信息。若我们发现在未获得监护人同意的情况下收集了儿童信息，将尽快删除。

9. 联系我们

如对本协议或你的个人数据有任何疑问、请求或投诉，请联系：

邮箱：support@example.com

我们通常会在 30 天内回复。

10. 跨境传输

我们的服务器可能位于你所在国家或地区之外。我们会采取合理措施，确保你的信息在传输与存储过程中获得与本协议所述水平相当的保护。

11. 协议变更

我们可能不时更新本协议。发生重大变更时，我们会更新本页顶部的「最后更新」日期，并在必要时通过账号邮箱通知你。变更生效后继续使用本服务，即视为你接受更新后的协议。

12. 相关链接

Etsy → Pinterest Publisher (the "Service") is a helper tool that publishes an Etsy listing you choose as a Pin on your own Pinterest account. This policy explains what information we collect, why we collect it, how we store and protect it, and what choices you have. Please read it before using the Service.

1. Information We Collect

1.1 Information you provide

Account data: user name, password, and optionally your email address, display name and phone number. Passwords are never stored in plain text — we keep only a salted, non-reversible digest.
Content you submit: the Etsy listing URL you paste into the app, and the optional Pinterest board ID you enter.

1.2 Information we receive after you authorize Pinterest

When you click "Connect Pinterest" and approve access on Pinterest, Pinterest returns the following to us through OAuth 2.0:

a Pinterest access token and refresh token;
the Pinterest user name within the granted scope;
the target board ID you configure in this app.

We never receive your Pinterest password and cannot read your messages, followers, or any Pinterest content outside the granted scope. The requested scopes are limited to boards:read and pins:write.

1.3 Information generated while you use the Service

Publishing records: the Etsy URL, product title, product image URL, target board ID, the Pin ID returned by Pinterest, timestamps, and success/failure status.
Technical logs: when serving requests, our servers may record timestamps, IP addresses and User-Agent strings, used solely for security auditing and troubleshooting.
Session token: a random token issued after sign-in, kept in your browser's local storage and managed server-side with an expiry time.

1.4 Information we do NOT collect

Your Pinterest or Etsy password;
Payment card numbers, government IDs, or other payment/identity documents;
Your Etsy purchase history, orders, or shipping address;
Behavioral tracking data for advertising or profiling. The Service embeds no third-party advertising, analytics, or profiling SDKs.

2. How We Use Information

Purpose	Data used
Create accounts, verify identity, keep you signed in	User name, password digest, email, session token
Create Pins on your behalf through the Pinterest API	Pinterest access token, board ID, Etsy listing data
Enforce the daily publishing limit	Publishing records (count and status)
Troubleshoot failures, prevent abuse, keep the Service secure	Technical logs, publishing records, error messages
Respond to access, correction and deletion requests	Account data, publishing records

We do not use this information for automated decision-making or advertising, and we do not sell or rent it to anyone.

3. Cookies and Browser Local Storage

The session token is stored in your browser's localStorage and is used only to authenticate calls to this Service. It is not used for cross-site tracking.
The Service sets no advertising, affiliate, or third-party analytics cookies.
The token is deleted immediately when you sign out.

4. Storage and Security

Account data and publishing records are stored in a MySQL database we operate. Session tokens and Pinterest tokens are stored in Redis with an expiry, and idle sessions lapse automatically.
The session token is renewed on each use and is invalidated immediately on sign-out, disablement, or account deletion.
Passwords are stored as salted digests; the plain text is never retained.
We recommend accessing the Service over HTTPS and enable transport encryption in our deployment. Do not use the Service on untrusted networks.
No method of transmission over the Internet is completely secure, so we cannot guarantee absolute security.

5. Sharing and Third Parties

We do not sell, rent, or trade your personal information. We share it only where necessary:

Pinterest, Inc. — to create Pins through Pinterest API v5 after you grant access. That processing is also governed by the Pinterest Privacy Policy.
Etsy — we read only the public information on the listing page you submit (title, description, price, images). We do not access any data behind a login. See the Etsy Privacy Policy.
Infrastructure providers — cloud vendors hosting our servers, database and cache, processing data only on our instructions.
Legal requirements — where required by applicable law or a valid legal process.

6. Retention

Account data: retained while your account exists.
Publishing records: retained for quota accounting and troubleshooting until the account is deleted.
Technical logs: generally no longer than 30 days.
After you delete your account, it is marked as deleted, the session token and Pinterest tokens are invalidated and removed, and the account can no longer be used to sign in. To request permanent erasure, contact us as described in section 9.

7. Your Rights

Access and correction: you can view your account details in the app; contact us to correct them.
Revoke Pinterest access: remove this app under "Apps you've authorized" in your Pinterest account settings, or re-authorize a different Pinterest account in the app.
Delete your account: use "Delete account" in the app; the session token is revoked and the stored Pinterest tokens are removed immediately.
Data export or erasure: contact us as described in section 9 and we will respond within a reasonable period.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If we learn that we have collected such information without parental consent, we will delete it promptly.

9. Contact Us

For any question, request, or complaint about this policy or your personal data:

Email: support@example.com

We normally respond within 30 days.

10. International Transfers

Our servers may be located outside your country or region. We take reasonable steps to ensure your information receives a level of protection consistent with this policy during transfer and storage.

11. Changes to This Policy

We may update this policy from time to time. For material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you via your account email. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.