KoaleoStudio Content Manager — Privacy Policy

Effective date: 26 October 2026

1. Who is responsible

KoaleoStudio Content Manager is an internal tool operated by Sergio Linares Fuentes, trading as KoaleoStudio, in Spain. For questions about this tool or your personal data, contact koaleo@selifu.com.

The tool is for the owner of KoaleoStudio to manage their own authorized Pinterest business account. It is not a public service for connecting other people's accounts. This policy covers the tool, not purchases on Etsy or Pinterest's own services.

2. Information used by the tool

With the account owner's authorization, the tool accesses the minimum information needed for the requested features. This may include the Pinterest account's identifier and profile details; the owner's boards, sections and Pins; and available account and Pin performance metrics.

The owner also supplies product images, titles, descriptions, destination links and publishing instructions. OAuth access and refresh tokens are used to maintain the authorized connection. The tool does not request the owner's Pinterest password or collect customer order details, payment information or private messages.

Basic technical records may include request times, response codes and operational errors. Tokens, passwords and complete API response payloads are not to be included in application logs.

3. Purposes and permissions

The tool uses this information to create or update Pins selected by the owner, organize the owner's boards and sections, display performance information, and maintain a secure connection. Publication requires the owner's knowledge and authorization of the selected content. API access does not authorize advertising expenditure.

Permissions are limited to the required account, board and Pin functions. Optional features requiring additional permissions will not be enabled without further authorization. Denying or withdrawing a required permission prevents the associated feature from working.

Where applicable, authorized account access is based on consent. Limited security and operational processing is based on the legitimate interest in protecting the service. Processing required by law is based on the relevant legal obligation. OAuth authorization does not waive data protection rights.

4. Storage and retention

Pinterest account, board, Pin and organic analytics information is retrieved when needed, rather than copied into a permanent content or analytics database. Pinterest-sourced information is not retained beyond the permitted use. Any storage exception must be permitted by Pinterest's terms and disclosed before it is enabled.

OAuth tokens are kept in a restricted credential store while the connection remains authorized. They are removed when the tool's connection is disconnected or deletion is requested. Owner-supplied product materials and publishing instructions may be kept for as long as the owner needs them for content management, subject to their deletion instructions.

Limited operational records are retained only for troubleshooting, security or a legal requirement, and are removed when those purposes no longer require them. Applicable retention criteria and details can be requested using the contact above.

5. Recipients and AI assistance

Authorized publishing requests send the selected content and destination links to Pinterest. Pinterest processes that information under its own privacy policy. Clicking a product link may take a visitor to Etsy, whose policies apply there.

Infrastructure and security providers may process the minimum technical data necessary to operate the tool under the operator's instructions. Pinterest API data is not sold, licensed or provided to other advertising services.

AI assistance may prepare copy from product materials supplied by the owner. Under this configuration, Pinterest API content is not sent to external AI services or used to train or improve AI models. OAuth secrets are not supplied to an AI model. No decisions producing legal or similarly significant effects about individuals are made solely by this tool.

If personal data must be transferred outside the European Economic Area, an applicable lawful transfer mechanism must be in place, such as an adequacy decision or appropriate contractual safeguards. Information about applicable recipients and transfer safeguards can be requested from the operator.

6. Disconnecting, deletion and your rights

The account owner can revoke the application's access in their Pinterest account settings. This stops future authorized API access; it does not automatically remove content already published on Pinterest.

To disconnect the tool, request deletion of stored authorization data, or exercise applicable rights of access, correction, erasure, restriction, objection or portability, contact koaleo@selifu.com. Consent can be withdrawn without affecting the lawfulness of prior processing. Identity may need to be verified before a request is acted on.

Requests concerning information held by Pinterest or Etsy should also be directed to the relevant platform. You may complain to the relevant supervisory authority, including Spain's Agencia Española de Protección de Datos at https://www.aepd.es/.

7. Privacy page and external services

No advertising pixels or optional analytics are added by this tool to its privacy page. The hosting website may have its own necessary services, cookie controls and privacy notice; those remain separate and applicable to visits to that website.

Pinterest privacy policy: https://policy.pinterest.com/en/privacy-policy
Etsy privacy policy: https://www.etsy.com/legal/privacy/

8. Changes and contact

This policy will be updated before a material change to the tool's purposes, data use or recipients takes effect. The current version and effective date will be available on this page.

Privacy contact: koaleo@selifu.com