Privacy Policy

Contact Information

Privacy requests can be sent to the NumberNinjaDesigns privacy team. This address is used for privacy and data protection questions.

GDPR Statement

For individuals in the European Economic Area, NumberNinjaDesigns supports applicable GDPR rights, including access, correction, deletion, restriction and objection where legally available.

Information Collection

The Etsy Promo Publisher creates a pseudonymous secure session and, after authorization, processes the connected Etsy shop identity and active listing metadata, current TikTok creator controls, publication choices, consent evidence, provider status and limited security audit events. OAuth tokens are encrypted server-side. Platform passwords are never collected. With explicit permission, the separate Pinterest tag may process permitted measurement data.

Use of Information

Publisher data is used only to prove Etsy listing ownership, create the requested local preview, apply current TikTok controls, prevent duplicate publication, perform the user-approved upload, provide status readback, secure the service and honor deletion requests. It is not sold.

Third Party Services

NumberNinjaDesigns may use official services from Pinterest, Meta, Instagram, TikTok, Google, Reddit, Printify and Etsy. The optional Pinterest measurement tag loads only after consent. Those services operate under their own privacy policies and account controls.

Pinterest API and Account Data

NumberNinjaDesigns Content Automation uses the official Pinterest API for an authorized NumberNinjaDesigns business account to read permitted account, board and Pin data and to create or schedule approved boards and Pins. NumberNinjaDesigns is an independent service and is not endorsed by, sponsored by or affiliated with Pinterest. Pinterest content and Pinterest-derived data are never sold, resold, licensed, redistributed or otherwise made available to third parties.

OAuth access and refresh tokens are encrypted server-side and used only for the authorized Pinterest operations. If the account owner disconnects Pinterest or revokes access, Pinterest API calls stop and the encrypted OAuth grant and pending authorization records are deleted when the disconnection is processed. Sanitized non-content security and duplicate-prevention evidence may remain for up to 90 days, or longer only where required by law.

Data Retention

Publisher sessions expire after 30 days; listing and creator caches expire after 15 minutes and 5 minutes. Completed publication jobs and limited audit events are removed after 90 days. An inactive publisher workspace without a valid session is removed after 31 days. The generated video is not stored by NumberNinjaDesigns: it remains in the visitor's browser recovery storage until publisher data or browser data is cleared. Contact records follow the period reasonably required for the request or law.

Data Security

Publisher sessions use secure HttpOnly cookies and same-origin request protection. OAuth state is unique and single-use; Etsy authorization uses PKCE. Provider tokens are encrypted and tenant-separated server-side. The exact uploaded video is verified against the user's reviewed SHA-256 hash. No public feature asks for a platform password.

Children's Privacy

This website and the Etsy Promo Publisher are not directed to children and do not knowingly collect personal data from children.

International Transfers

Because external platforms may operate internationally, data handled through official APIs may be processed according to those providers' regional infrastructure and policies.

User Rights

Publisher users can disconnect Etsy or TikTok and permanently delete their publisher workspace directly from Connections & data. Pinterest access can be revoked in Pinterest account settings or through a disconnection request to the privacy team. Users may also request access, correction or deletion by email. External platform controls remain available through each provider.