Privacy Policy

1. General Provisions

This Privacy Policy governs the processing of personal data of users of sellmen.ru (the "Website") and the BoostKlient service. It is prepared in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data."

The personal data controller is Individual Entrepreneur Evgeniy Vladimirovich Sakharov. Contact email: zalarilogist@gmail.com.

2. Data We Collect

• Account data: email address, username, and password hash. We do not store passwords in plain text.
• Technical data: IP address, browser and operating system, cookies, session data, and access timestamps.
• Business profile data: business name and description, uploaded images and files, and publishing settings.
• Pinterest account ID and username, granted OAuth permissions, and OAuth tokens.
• IDs and names of boards selected by the authenticated account owner.
• Content, schedule, publishing status, and IDs of Pins explicitly approved by the user.
• Organic analytics for the authenticated owner's Pins for the most recent 30 days.
• A short-lived Pinterest Trends cache retained for no longer than 15 minutes.

3. Purposes of Processing

• Registering and authenticating users.
• Providing BoostKlient features and technical support.
• Generating content from materials supplied by the user.
• Scheduling and publishing user-approved content through the official Pinterest API.
• Displaying organic Pinterest analytics to the same authenticated account owner.
• Maintaining Website security and reliability and complying with applicable law.

4. Legal Bases

We process personal data on the following bases:

• The data subject's consent.
• Performance of a contract with the user.
• The controller's legitimate interests in Website security and operation.
• Compliance with legal obligations applicable to the controller.

5. Cookies

The Website uses essential cookies for authentication, session management, CSRF protection, and storing the user's cookie choice. Functional cookies may remember interface and content-language preferences.

Users may reject optional cookies through the consent banner or their browser settings. Essential cookies are required for the Website to function.

6. Service Providers and Data Transfers

• Pinterest API: OAuth authorization, reading authorized resources, and publishing user-approved content.
• AI service providers: processing the user's own materials to generate text and images. Data obtained from Pinterest is not sent to external AI providers while the processor review remains incomplete.
• PostgreSQL hosting: storing service data on servers located in the Russian Federation.

We do not sell personal data or Pinterest Data.

7. Retention

• Pinterest account operational data is retained while the account is connected and the data is needed for a user-selected operation.
• Organic Pinterest analytics are retained on a rolling 30-day basis.
• Pinterest Trends data is cached for no longer than 15 minutes.
• When Pinterest is disconnected, tokens, boards, Pins, analytics, temporary copies, and related derived data are deleted from storage controlled by BoostKlient.
• BoostKlient account data and financial records are retained separately for the periods required to perform the contract and comply with law.
• Uploaded files and generated content are retained until deleted by the user or until the account is removed, subject to legal retention duties.
• Technical logs are retained for no longer than 90 days.
• Session cookies remain until logout or cookie expiration.

8. User Rights

Subject to applicable law, users may:

• Request information about the processing of their personal data.
• Request correction, restriction, blocking, or deletion of their data.
• Withdraw consent to processing.
• Submit a complaint to the competent data protection authority.

Requests may be sent to zalarilogist@gmail.com and will be reviewed within 30 days.

9. Withdrawal and Pinterest Disconnection

Consent may be withdrawn by contacting us or using the account settings. Withdrawal does not affect processing lawfully completed before the withdrawal.

Pinterest access may be disconnected from the connected accounts section. Reconnecting later requires a new Pinterest OAuth authorization.

10. Security

We use organizational and technical safeguards including password hashing, HTTPS encryption, restricted database access, access-token protection, and regular software updates.

11. Contact

Controller: Individual Entrepreneur Evgeniy Vladimirovich Sakharov
Email: zalarilogist@gmail.com