PinHarbor privacy notice

Effective date: October 21, 2026.

Operator and contact

PinHarbor is operated by Tanic Software. Contact ogoudge@outlook.com for privacy questions, support or deletion requests. Tanic Software monitors this mailbox. Do not send passwords or API keys.

Scope and current availability

This notice covers PinHarbor's public marketing website and separate access-restricted development studio. The marketing pages have no sign-in form, account database, upload endpoint or AI connection. The studio is under development. Live Pinterest trend research, OpenAI generation, private cloud image uploads and direct Pinterest publishing are not activated in the current hosted preview.

Information and purposes

Firebase Authentication processes account information, including email address, user identifier and authentication status. Cloud studio records can contain product details, product and affiliate URLs, pin copy, image briefs, alternative text, niche selections, preparation sources and preferences. Affiliate links may contain tracking identifiers. This information supports account access, saving and reopening drafts, preparing editable content and retaining workflow preferences.

The studio stores account-scoped onboarding progress and draft recovery information in your browser. Clearing browser storage may remove this progress. Signing out clears the active view, not cloud records. Local test data on the operator's computer has not been automatically migrated to the hosted studio.

Google Firebase provides authentication and cloud draft storage. Cloudflare Pages serves the public marketing and privacy pages. Vercel serves the separate protected studio. These hosting providers may process technical request and security information, including IP addresses. The reviewed marketing package has no application analytics script, advertising pixel or contact form; hosting-provider logging is separate. Support correspondence sent to the contact email is used to respond to requests.

Optional integrations planned, not active

OpenAI: the planned connection uses each user's own API account. Requested generation would send selected product facts, prompts and images to OpenAI. Server-side encrypted credential storage is implemented locally but not activated. API charges are separate from ChatGPT subscriptions. We do not promise zero retention by OpenAI.

Pinterest: the planned connection uses authorization for the central PinHarbor app, not your Pinterest password or personal developer keys. Approved access would allow account/board information to be processed and explicitly reviewed pins, images and destination URLs to be submitted. These features require activation and an updated notice reflecting actual deployed processing before use.

Opening Amazon, Pinterest, OpenAI or another external website is subject to that service's practices. A pasted affiliate link does not establish account eligibility. Preview statuses do not prove a public pin exists or income was earned.

Retention and deletion

The approved retention policy is to keep account content until the user requests deletion. Account content includes saved drafts, product information, images and stored integration credentials where those features are active.

After account-content deletion and authentication-account removal are completed, only minimal deletion-status metadata is retained for 30 days for troubleshooting and preventing duplicate processing, then scheduled for removal. This period begins at completed cleanup, not when the request is submitted. It is not a 30-day waiting period before deleting content. Minimal metadata consists of an account identifier, completion/status information and necessary processing timestamps; it excludes raw pin copy, images, affiliate URLs and credentials.

The self-service deletion workflow and cleanup have been implemented and tested locally using disposable Firestore emulator fixtures and mocks. They are not activated in the hosted preview. Until activation, contact ogoudge@outlook.com to request deletion. We must verify account ownership before processing a request. This notice does not promise immediate completion or an operational automatic cleanup schedule before those services are activated.

Deletion stops new PinHarbor work before erasure. If an execution cannot be confirmed stopped, processing may pause for investigation; we will not silently retry a potentially completed Pinterest post. Such a request is not considered completed, and the 30-day completed-status period has not begun. Contact the monitored email for help with an interrupted request.

Deleting PinHarbor data does not automatically delete already-published Pinterest pins or records held independently by OpenAI, Pinterest, Cloudflare, Vercel, Google or email providers. Provider-held logs and records follow their own retention practices. Browser copies on other devices may require clearing locally. Support correspondence and operational logging are separate from the minimal completed-deletion record; no fixed retention period for those separate records is promised by the 30-day completion-record policy. Contact us about a specific record or request.

Security and notice changes

The design separates users' records and requires verified account access for permitted cloud operations. No system guarantees absolute security. We review this notice when actual processing changes and update the effective date on this page.