Privacy Policy

Boardly is a Pinterest content planner that helps lifestyle and personal finance creators batch-schedule single pins and carousels to their own boards. This Privacy Policy explains what information we collect when you use Boardly, how we use it, and what rights you have over your data.

The short version: we only collect what we need to publish pins on your behalf, we never sell your data, and you can disconnect and delete everything at any time.

When you connect your Pinterest account to Boardly, we collect and store:

• Pinterest account identifier — your Pinterest username and user ID, used to identify your account inside Boardly
• OAuth access and refresh tokens — issued by Pinterest, used solely to make API requests on your behalf (read your boards and publish the pins you schedule)
• Content you upload — images you choose to schedule as pins, along with the titles, descriptions, board selections, and publish times you provide
• Board and pin metadata — a cached copy of your Pinterest board list and the pins Boardly has published on your behalf (so you can see your publishing history)
• Operational logs — timestamps and statuses of scheduled publishing jobs (success, failure, retries), used for debugging and to show you the state of your queue

Our hosting providers (Vercel, Railway, Cloudflare) also collect standard infrastructure logs such as IP addresses and request timestamps. These are handled under their respective privacy policies, linked below.

We use the information you provide only to:

• Authenticate you and maintain your session while you use Boardly
• Publish pins to the Pinterest boards you select, at the times you schedule
• Show you your boards, your queue of scheduled pins, and the publishing status of pins you have published through Boardly
• Diagnose and fix issues with the publishing pipeline (for example, if Pinterest returns an error for a scheduled pin)

We do not use your data for advertising, profiling, model training, or any purpose unrelated to running the Boardly service.

Boardly uses the Pinterest API v5 under the OAuth scopes you explicitly grant during sign-in. With those scopes Boardly can:

• Read the list of your boards
• Create pins (single image or 2–5 image carousels) on the boards you select, with the content you upload
• Read your basic Pinterest profile (username and avatar)

Boardly never accesses pins or boards you did not authorize, never posts without an explicit scheduling action by you, and never shares Pinterest data with any third party. Our use of the Pinterest API complies with the Pinterest API Terms of Service.

Boardly is an independent tool and is not endorsed by, affiliated with, sponsored by, or in any way officially connected to Pinterest, Inc. “Pinterest” is a trademark of Pinterest, Inc., used here only to describe interoperability with the Pinterest service.

Boardly does not resell, redistribute, license, or otherwise make available Pinterest content or any Pinterest-derived data to any third party. Data obtained through the Pinterest API is used solely to provide the Boardly service to you, the account owner, and is never shared with third parties except the infrastructure providers listed below that process it on our behalf.

Your data is stored on the following infrastructure:

• Railway Postgres — account records, OAuth tokens, scheduled pin metadata, and operational logs
• Cloudflare R2 — images you upload for scheduled pins
• Vercel — the application itself (frontend and serverless API)

All traffic to and from Boardly is encrypted with HTTPS. OAuth tokens are stored only on the server and are never exposed to the browser. Access to production infrastructure is restricted and requires two-factor authentication.

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee that data will never be compromised. We will notify affected users without undue delay if we become aware of a breach involving their data.

Boardly sets a single essential session cookie when you log in, used to keep you authenticated between requests. The cookie is HTTP-only, marked Secure, and contains an opaque session identifier — no personal data.

We do not use tracking cookies, third-party analytics, or advertising pixels.

Boardly relies on the following third-party services to operate. Each handles your data under its own privacy policy:

• Pinterest (OAuth + API) — privacy policy
• Vercel (application hosting) — privacy policy
• Railway (database hosting) — privacy policy
• Cloudflare R2 (image storage) — privacy policy

We do not sell or share your data with any third party other than these infrastructure providers, who process it solely on our behalf.

We keep your data for as long as your Boardly account is connected to Pinterest. When you disconnect your Pinterest account from Boardly, or request account deletion, we will:

• Revoke and delete your stored OAuth tokens within 24 hours
• Delete uploaded images and scheduled-pin records
• Cancel any pending scheduled publishing jobs associated with your account
• Retain only minimal audit records (e.g., a deletion timestamp) as required for security and compliance purposes

You have the right to:

• Access the data we hold about you
• Correct inaccurate information
• Delete your account and all associated data
• Disconnect your Pinterest account at any time, which revokes Boardly's access on Pinterest's side as well
• Export a copy of your data in a portable format

To exercise any of these rights, contact us at the email below. We respond to verified requests within 30 days.

Boardly is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If we learn that we have inadvertently collected such data, we will delete it promptly. Use of Pinterest itself is restricted to users 13 and older under Pinterest's own terms.

We may update this policy as the product evolves. The “Last updated” date at the top of this page will reflect any change. For material changes that affect how we handle your data, we will notify connected users by email or in-app notice before the change takes effect.

For any questions about this Privacy Policy, or to exercise your rights, contact us at: support@boardly.lifestyle