Privacy Policy

1. Introduction

Made to Spark ("we," "our," or "us") operates the Pinterest Pin Generator service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and ensuring your personal data is handled in a transparent and secure manner.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the service.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Account Information: Name, email address, and password when you create an account.
• API Credentials: API keys for third-party services like OpenAI, Ideogram, or Anthropic (stored using industry-standard encryption).
• User Content: Keywords, topics, article content, and specifications you submit for image or text generation.
• Generated Assets: AI-generated images, titles, descriptions, and analysis data produced through your use of the service.
• Payment Data: Payment information and transaction history (processed securely by Stripe; we do not store your full credit card details).
• Support Communications: Information you provide when contacting our support team.

2.2 Usage and Technical Data

We automatically collect certain information when you visit or use our service:

• Log Data: IP address, browser type, operating system, referring URLs, and pages viewed.
• Usage Patterns: Time spent on pages, features used, and frequency of visits.
• Device Information: Device type, screen resolution, and language preferences.
• Tracking Technologies: We use cookies, Meta Pixel, and Partnero tracking to understand service performance and attribution.

3. How We Use Your Information

We process your information for the following purposes:

• Service Delivery: To provide and maintain the Pinterest Pin Generator, process your generation requests, and manage your account.
• AI Generation: To facilitate the creation of AI-powered images and content based on your inputs.
• Automation & Scheduling: To enable the scheduling and automated publishing of content to your connected Pinterest boards.
• Communication: To send service updates, security alerts, and marketing communications (where permitted).
• Payment Processing: To manage subscriptions, process transactions, and prevent billing fraud.
• Optimization: To analyze usage trends, improve our AI prompts, and enhance user experience.
• Compliance: To enforce our terms, comply with legal obligations, and protect our rights.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context:

• Contractual Necessity: To fulfill our agreement to provide the service to you.
• Legitimate Interests: For service improvement, security, and limited marketing that does not override your privacy rights.
• Legal Obligation: To comply with tax, accounting, or regulatory requirements.
• Consent: Where you have given explicit permission (e.g., for non-essential cookies or marketing).

5. Information Sharing and Disclosure

We share your data only with specific categories of third parties to enable our service:

5.1 AI and Technical Partners

Data shared with these partners is strictly for generating your requested content:

• AI Platforms: OpenAI, Anthropic (Claude), Ideogram, Runware, and Freepik.
• Media & Search: Unsplash, DepositPhotos, and Serper.
• Technical Tools: ScreenshotOne (for web captures).

5.2 Business & Marketing Partners

• Payments: Stripe (Payment processing).
• Tracking & Analytics: Partnero (Affiliate tracking), Meta Pixel (Advertising analytics).
• Communication: Email delivery services.

Note: We ensure all third-party partners provide adequate data protection through Standard Contractual Clauses (SCCs) where international transfers are involved.

5. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure API key storage using Laravel's encryption
• Regular security audits and updates
• Access controls and authentication
• Secure data centers and infrastructure

6. Data Retention

We follow a strict data minimization and retention policy:

• Active Accounts: Account data is retained as long as your account exists.
• Generated Images: Stored for up to 60 days, after which they are automatically deleted from our primary storage.
• Temporary Assets: Resized images and temporary processing data are typically deleted within 7 days.
• Unverified Accounts: Accounts that do not verify their email address are automatically deleted after 10 days.
• Legal Records: Transactional and tax-related data are retained for the statutory period required by French law.

7. Your Rights

Depending on your location, you have several rights regarding your data:

• Access & Portability: Obtain a copy of your data in a structured, machine-readable format.
• Rectification: Correct inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request full deletion of your account and associated data.
• Restriction: Request that we limit the processing of your data.
• Withdrawal of Consent: Revoke permissions at any time (e.g., for Pinterest access or marketing).

To exercise these rights, please contact us at the email address provided below.

8. Pinterest Integration

Our Service integrates with the Pinterest API to provide scheduling and automation features.

• Authorization: We use secure OAuth tokens to access your Pinterest boards and publish pins. We never see or store your Pinterest password.
• Data Handling: We only fetch the boards and pins necessary to provide the service. Content analyzed is linked back to its source on Pinterest.
• Revocation: You can disconnect your Pinterest account at any time via your **Profile Settings** within our app, or by revoking access in your Pinterest account settings.
• Third-Party Terms: Your use is also subject to the Pinterest Terms of Service and Pinterest Privacy Policy.

9. Cookies and Tracking

We use cookies to ensure the functionality and security of our site:

• Essential: Required for login, security, and payment processing.
• Performance: Helps us understand how users interact with the site.
• Marketing: Used for attribution and ad performance tracking.

You can manage your preferences via our cookie consent banner. Declining non-essential cookies will not impact your ability to use the service.

10. International Transfers

As we use global partners (like OpenAI and Stripe), your data may be transferred to the United States. We ensure these transfers comply with GDPR through the use of Standard Contractual Clauses or other approved legal mechanisms.

11. Children's Privacy

Our service is strictly for users aged 13 and older. We do not knowingly collect data from children. If we discover such data, it will be deleted immediately.

12. Lodging a Complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In France, this is the **CNIL** (Commission Nationale de l'Informatique et des Libertés).

13. Contact Information

For any privacy-related inquiries, data requests, or to contact our Data Protection Officer:

• Email: info@madetospark.com
• Data Protection Officer: Paul P.
• Address: 21 Rue de l'Eglise, 94300 Vincennes, France
• Entity: Made to Spark
• SIREN: 940117690