Privacy Policy

1. Who this applies to

Pinitup is an online library of AI image and video prompts, templates, creative references, guides and browser-based tools. This policy describes information handled when you visit our pages, search, sign in, save pins, copy prompts, buy a plan, or send us a support request, feedback or content report. Features may differ for guests, signed-in members and administrators.

Pinitup is operated by Togepe Tech OPC Private Limited, which is responsible for personal information processed for the service. Third-party platforms and payment providers may separately handle information under their own policies. This page should be read alongside our Terms of Use and Cookie Policy.

2. Information we collect

Account and authentication

When you sign in with Google, we receive information needed to recognise your account, which may include your Google account identifier, name, email address and profile picture. We process sign-in sessions and account settings to maintain secure access.

Activity inside Pinitup

We process the pins, boards, saved references, searches, prompt views, copies, shares, feature interactions and plan entitlements associated with your use of the platform. We also record limited signed-in activity timestamps and internal account identifiers for operational and audience reporting.

Purchases and subscription records

If you purchase a paid plan, our payment partner handles checkout. Pinitup receives the transaction and subscription information needed to confirm payment, activate access, handle cancellation, resolve billing issues and retain necessary accounting records. Do not send us full payment-card details.

Technical, security and communications data

Our application and infrastructure providers may process IP addresses, browser and device details, request logs, errors and authentication/security events. If you use our Contact Us form for technical issues, payment queries, content reports, feedback or other enquiries, we store the name, email address, category, subject, message, optional related URL and, if signed in, an internal account reference. These requests are visible only to authorised administrators. For signed-in users, the name and email are taken directly from the account record and cannot be edited in this form. Guests supply their own name and email address, which are not independently verified.

Content and administrative operations

Public prompt pages can include images, videos, prompt descriptions, credited source information and editorial material. Administrators may work with unpublished assets and draft metadata in restricted storage and processing systems. Please do not send sensitive personal information as part of a prompt or complaint unless it is necessary.

3. Why we use information

We process information to provide requested account features and paid entitlements; maintain saved content, usage limits and settings; operate search and discovery; investigate fraud, abuse and security incidents; maintain our service; analyse product use; respond to queries and rights requests; handle content complaints; and comply with applicable obligations.

Where UK data-protection law applies, the relevant legal basis depends on the activity: contract for delivering requested account or paid features; legitimate interests for proportionate security, service maintenance, and internal improvement; legal obligation for applicable record-keeping or lawful requests; and consent where required for a particular technology or communication. These bases do not remove any rights you have under applicable law.

4. Analytics and tracking

Pinitup uses Google Analytics 4 to measure visits, page views and selected product interactions. Google Analytics may use cookies and browser or device signals. Pinitup does not intentionally send your name, email, Pinitup account role or internal user ID as Google Analytics event fields.

Separately, first-party signed-in activity records help our administrators understand usage, including active, new and returning accounts. These internal records are different from Google Analytics browser identifiers. For current browser storage and controls, see the Cookie Policy.

5. Service providers and sharing

Depending on the feature and current hosting configuration, recipients include Google (sign-in and analytics), Vercel (web hosting), Render (API hosting), MongoDB Atlas (database storage), Cloudflare R2 (media storage), Razorpay (checkout and payments), and vendors supporting authorised content workflows. A third-party AI provider may receive content supplied to a particular AI-enabled administrative operation; this does not mean every page visit or prompt copy is sent to an AI model.

We may disclose relevant information when needed for security, fraud prevention, legal compliance, or to investigate a credible content or rights complaint. We do not sell personal information to advertisers. When you intentionally share a public prompt link, recipients can see the public page.

6. Retention and security

We keep data for the time needed to run an account or provide its features, then for any necessary security, dispute, accounting or legal purposes. Different records have different lifetimes: session cookies have their own expiry, temporary administrative assets can be removed after processing, and billing or security records may need to be kept longer. Contact requests are kept while unresolved. When an administrator marks a request Completed, it is scheduled for automatic deletion seven days later; reopening cancels that deadline. Database deletion may occur shortly after the scheduled time, and backup or legally required records may persist under applicable retention rules. Deleting a public item does not necessarily delete all backups or compliance records immediately.

Controls include authentication, role-based access, server-side credentials and safeguards against unauthorised requests. No transmission or storage method can guarantee complete security.

7. Your rights and choices

Depending on your location and the circumstances, you may have rights to request access, correction, deletion, restriction, objection or portability of personal data, and to withdraw consent when processing relies on it. Some requests may be limited by lawful retention needs or the rights of other people. You can also sign out, manage browser settings and use your account features to manage saved material.

For an account or personal-data request, email help@pinitup.io. Please identify the account or page involved without sending passwords or full card details. We may ask for information needed to verify a request. If you are in the UK, you may also raise a concern with the Information Commissioner's Office.

8. Requesting content removal

If you believe a prompt, image, video or other item on Pinitup infringes your rights, exposes personal information, misattributes your work, or should be removed for another reason, email help@pinitup.io with the subject Remove Content - (Prompt name). Please include the prompt name, the direct URL of the page, the specific material at issue, why you are requesting removal, and any evidence or authority to act that is relevant to the request. Do not send unnecessary sensitive information.

We may ask for clarification and review the available context, applicable law and the rights of others before deciding whether to correct, restrict or remove the material. Sending a request does not guarantee immediate removal. We may retain limited correspondence and records where needed to handle the request, prevent abuse or meet legal obligations.

9. International processing

Service providers may process information in countries other than the one where you live. Where required, international transfers must be supported by a recognised legal transfer mechanism or another valid protection under applicable data-protection law.

10. Changes and contact

We will update this policy when significant features or information practices change and show the latest revision date here. Material changes may require additional notice. For privacy, content-removal and general enquiries, contact Togepe Tech OPC Private Limited at help@pinitup.io; for payment-related issues, consult the billing information available in your account and the Terms of Use.