Privacy Policy

1. Scope

This Privacy Policy explains how the KoeChto Pinterest Publisher web app handles information when an authorized operator uses the application, the related review website, and the connected Pinterest API functionality. The service is operated only by the KoeChto brand team — IP Morzhukhin Semen Andreevich — and is used exclusively to manage publishing on our own corporate Pinterest account that promotes balloon arrangements sold under the KoeChto brand on Wildberries.

2. Operator Details

3. Information We Process

The web app processes only the data needed to operate the publishing pipeline:

• The administrator login and password set in the server-side environment file (used to authenticate access to the admin panel).
• Pinterest OAuth access and refresh tokens for the single corporate Pinterest account.
• Pinterest board identifiers selected as the publishing destination.
• Product photographs and pin titles uploaded by the operator through the admin panel.
• Internal references such as product SKU, category labels and prompts that are stored only on the operator's server.
• Standard server access logs (IP address, timestamp, request path) needed for security and abuse prevention.

4. How Pinterest Data Is Used

Pinterest API data is used solely to support administrator-triggered actions of the KoeChto brand: connecting the Pinterest account, listing the operator's own boards, creating a new corporate board on the operator's request, publishing pins of our products to the selected corporate board, and reading Pinterest analytics for those pins. Pinterest data is never sold and is not shared with unrelated third parties.

5. Token Storage

The Pinterest OAuth access and refresh tokens are stored in a private SQLite database on the operator's VPS. The database file is accessible only to the operator's server process and the system administrator. Tokens are not exposed to any other service. The operator can revoke them at any time via the Disconnect button on the Pinterest tab of the admin panel — this deletes the token row from the database. Tokens can also be revoked from Pinterest's own connected-apps settings.

6. Images And User Content

Product images uploaded by the operator are stored on the operator's VPS in the application's media folder. They are processed only to construct the Pinterest pin creation request via the Pinterest API. The application does not transmit these images to any third party other than the AI image-processing service (Polza AI), which is used as a server-side backend to render the final pin image.

7. Security

We apply reasonable technical and organizational measures, including:

• HTTPS with a valid TLS certificate for the public hostname.
• Single-administrator authentication on the admin panel via a secret stored in the server environment file.
• Signed session cookies (HttpOnly, SameSite=Lax).
• Short-lived OAuth state values to reduce callback forgery risk.
• Restricted token scopes — only those required for the documented review scenario.
• User-triggered disconnect through the admin panel and Pinterest connected-apps settings.

8. Third-Party Services

The service interacts with the following third-party platforms required for its operation:

• Pinterest API — to publish pins to the operator's own corporate account.
• Polza AI — server-side AI image generation used to compose the final pin image.
• Wildberries — pins link back to the operator's product pages on the marketplace.

Their separate terms and privacy policies also apply to your use of those platforms.

9. Revoking Access And Data Deletion

You can revoke access at any time by clicking Disconnect on the Pinterest tab of the admin panel, or by removing the app from your Pinterest connected-apps settings. To request deletion of any related records that may be retained on the operator's server, contact the operator using the details in the next section.

10. Contact

Website: koechtobot.ru
Brand store: Wildberries — KoeChto
Operator: IP Morzhukhin Semen Andreevich, INN 745108211018, OGRNIP 323745600169951
Legal address: 454010, Russia, Chelyabinsk, Agalakova Str. 45, apt. 107