Legal
Privacy Policy
Last updated: June 2026
1. Introduction
Vynthr ("we", "us", "our") operates Vynthr (the "Service") accessible at https://vynthr.com.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights regarding your personal data. By using the Service, you agree to the practices described in this policy.
2. Information We Collect
2.1 Information you provide directly
- Account data: email address and password (hashed) when you register
- Workspace data: niche names, keyword lists, affiliate links, caption preferences you configure
- Content: images and captions you upload directly to the Service
- Communications: messages you send us via email or support channels
2.2 Information collected automatically
- Log data: IP address, browser type, pages visited, timestamps
- Usage data: features used, actions taken (approve / reject queue items), session duration
- Cookies: session cookies required for authentication; no third-party advertising cookies
2.3 Information from third-party integrations
- Pinterest: OAuth access tokens and board identifiers when you connect a Pinterest account
- Image sources: image URLs and metadata pushed via webhook or API from connected tools
- We do not receive your passwords for any third-party service
3. How We Use Your Information
- To create and manage your account and workspaces
- To operate the pin queue and publish approved content to Pinterest on your behalf
- To authenticate API requests from connected image sources
- To send transactional emails (password resets, critical service notices) — we do not send marketing email without explicit opt-in
- To diagnose bugs, monitor service health, and improve the platform
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your content to train AI models.
4. Pinterest Data
When you connect a Pinterest account, we store an OAuth access token to publish pins on your behalf. This token is stored encrypted in our database and is used exclusively to post content you explicitly approve within Vynthr. We do not read your private messages, contact list, followers, or any Pinterest data beyond what is necessary to post to your selected board.
You may revoke Vynthr's access at any time through your Pinterest security settings. Upon revocation, we will no longer be able to post to your account. Deleting your Vynthr account also removes stored tokens.
5. Data Storage & Security
Your data is stored using Supabase, a managed database platform. Data is hosted in EU (Frankfurt). Supabase uses encryption at rest and in transit (TLS 1.2+).
We implement row-level security policies so that each user can only access their own data. API keys are stored as server-side environment variables and are never exposed to the client.
Despite these measures, no system is 100% secure. We cannot guarantee absolute security of your data transmitted over the internet.
6. Data Retention
We retain your account data for as long as your account is active. Rejected pins are retained for 30 days then permanently deleted. Posted pins retain metadata (Pinterest pin ID, caption, image URL) indefinitely so you can reference your posting history.
If you delete your account, we will permanently delete all associated workspaces, pin queue items, and tokens within 30 days, except where retention is required by law.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and associated data
- Portability: request your data in a machine-readable format
- Objection / Restriction: object to or restrict certain processing
- Withdrawal of consent: where processing is based on consent, withdraw it at any time
To exercise any of these rights, email us at hello@vynthr.com. We will respond within 30 days.
8. Cookies
We use only strictly necessary session cookies to keep you logged in. We do not use tracking cookies, advertising pixels, or analytics cookies that share data with third parties.
You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Service.
9. Third-Party Services
Vynthr integrates with third-party services (Pinterest, AI image platforms, webhook sources). Each of these services has its own privacy policy. We are not responsible for the data practices of third-party services. Links to relevant policies:
10. Children's Privacy
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at hello@vynthr.com and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last updated" date above. We encourage you to review this policy periodically.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: