Privacy Policy

1. Who we are

This Privacy Policy is published by GabrielPFA ("we", "us"), the operator of the gabrielpfa.com website and of the apps listed on it (together, the "Services"). It applies to the website and to every app that links to this policy, including Gabriel PFA Staging app, Gabriel PFA Production app, WTD Staging app.

Questions about this policy go to doroftei.gabriel.pfa@gmail.com.

2. Information we collect

Website visitors

We do not collect any data from visitors to gabrielpfa.com.

Account information

If you create an account in one of our apps, we collect your name, email address, company name and role if you provide them, and the credentials needed to sign you in.

Pinterest advertising data

If you connect a Pinterest ad account, we receive the following through Pinterest's API, within the permissions you approve:

Ad account identifiers, names, currency and status.
Campaign, ad group and ad details such as names, status, objective, schedule and budgets.
Advertising performance metrics such as spend, impressions, clicks, reach, click-through rate, cost and conversion results.
The OAuth access and refresh tokens Pinterest issues so the app can keep the connection active.

What we do not collect

We do not access Pins or Boards, and we do not request permissions to do so.
We do not ask for or store your Pinterest password. Connection happens only through Pinterest's own sign-in and consent screen.
We do not collect personal information about the people who see or interact with your ads. Performance metrics reach us in aggregated form.

Usage and technical information

Our apps also collect basic technical data such as IP address, browser type, timestamps and error logs to keep them secure and working.

3. How we use information

To show account owners their campaign performance in our apps and compare it across advertising channels.
To authenticate users, provide support and keep the Services secure.
To meet legal obligations and enforce our terms.

We use Pinterest data only to provide the app's features to the person or organization who connected the account. We do not use it to build advertising profiles, to target individuals, or for any purpose unrelated to the account owner's own reporting and campaign management. We do not sell, rent or license Pinterest data.

4. Pinterest connection

Permission based. Our apps connect to Pinterest only after an authorized user approves them on Pinterest's consent screen. We request only the permissions needed for advertising reporting and campaign budget management.
You stay in control. You can disconnect Pinterest inside the app, or revoke the app's access in your Pinterest account settings under connected apps. After you disconnect, we stop collecting data and delete the stored tokens within 5 days.
Pinterest's rules apply too. Your use of Pinterest remains subject to Pinterest's terms and privacy policy. We handle Pinterest data in line with Pinterest's developer terms and guidelines, including its limits on how often we may call its API.

We do not share Pinterest data with other advertisers or sell it to anyone. We share information only with:

Recipient	Why
Cloud hosting and infrastructure providers, including Google Cloud and Firebase	To host the Services, store data, and authenticate users.
Your organization's authorized users	Data from an account you connect is visible to the people your organization grants access to in the app.
Authorities or advisers, where required	To comply with law, protect rights and safety, or in a business transfer, with the same protections.

6. How long we keep information

We keep advertising data and account information while the account is active and the advertising account stays connected. After disconnection or account closure, we delete or anonymize Pinterest data within 5 days, unless the law requires us to keep it longer. Backups are overwritten on their normal cycle, within 2 days.

7. Security

We protect information with access controls, encryption in transit, and restricted handling of access tokens. No system is completely secure. If a breach affects your information, we will notify you and the relevant authorities as the law requires.

8. Your choices and rights

You can ask us to give you access to your personal information, correct it, or delete it, and you can withdraw your consent to our handling of it, subject to legal limits. Under the privacy laws that apply to you, GDPR, you can also file a complaint with your privacy regulator. To make a request, email the contact in section 1. We respond within the time the law allows and may need to verify your identity first.

Advertising data belongs to the account owner who connected it. If you are not that owner, please contact them first.

9. Where information is processed

We process information in EU. Where information moves across borders, it may be subject to the laws of those places. We apply the safeguards described in this policy wherever the information is processed.

10. Children

The Services are not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy. We will post the new version on this page with a new "Last updated" date, and we will tell connected account owners about significant changes.

12. Contact us

GabrielPFA
doroftei.gabriel.pfa@gmail.com