Privacy Policy
Last updated: October 20, 2026
This Privacy Policy explains how helloCITY (“we”, “us”) handles information on our website hellocity.store and in helloCITY Pin Publisher, the internal application we use to publish content to our own Pinterest account through the Pinterest API. helloCITY is a small independent brand that designs original city-themed apparel and sells it through our Etsy shop (etsy.com/shop/hellocitystore).
1. Who this policy applies to
Website visitors. hellocity.store is an informational page. It has no accounts, forms, comments or checkout, and we do not use advertising or analytics cookies on it. Our hosting provider (Vercel) may process standard technical data such as IP address and browser type in server logs for security and reliability.
helloCITY Pin Publisher. The app is used only by members of the helloCITY team. There is no public sign-up and it is not offered to other Pinterest users or businesses. The only Pinterest account it connects to is our own business account, @hellocity_store.
Customers. Purchases happen on Etsy. Order and payment information is collected and processed by Etsy under Etsy's Privacy Policy.
2. Information we access through the Pinterest API
When our team authorizes helloCITY Pin Publisher with Pinterest OAuth, the app requests only these permissions for our own account:
- user_accounts:read – to show which Pinterest account is connected (username).
- boards:read and boards:write – to list our own boards and create a board for a new city when needed.
- pins:read and pins:write – to create Pins of our own product photos and confirm they were published.
We do not access, collect or store information about other Pinterest users, their Pins, boards, followers or activity.
3. How we use it
We use this access only to publish and schedule Pins of our own products on our own boards. Each Pin contains our image, a title, a description, alt text and a link to the matching product on our Etsy shop. We do not use Pinterest data for advertising, profiling, or any purpose other than managing our own content.
4. What we store and how we protect it
- The OAuth access and refresh tokens for our own account, encrypted at rest (AES-256-GCM).
- Basic records of the Pins we schedule: board, title, description, image link, destination link, scheduled date, status and the Pin ID returned by Pinterest.
Data is stored in our private database (Supabase), accessible only to authenticated helloCITY team members, and is never exposed in the browser or in public pages.
5. Sharing
We do not sell, rent or share any data obtained through the Pinterest API with third parties. We use service providers only to run the app (Vercel for hosting, Supabase for the database), and they process data on our behalf.
6. Retention and deletion
Tokens are kept only while the integration is connected. When we disconnect the app or revoke access from Pinterest settings, the stored tokens are deleted. Pin records are kept for our internal reporting and can be deleted on request. You can revoke the app's access at any time in Pinterest under Settings → Security → Apps.
7. Children
Our website and app are not directed to children under 13, and we do not knowingly collect information from children.
8. Your rights
Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information we hold about you. Contact us using the details below and we will respond within 30 days.
9. Changes to this policy
If we change this policy, we will update the “Last updated” date at the top of this page.
10. Contact
helloCITY · hellocity.store
Email: studiowova@gmail.com
Messages: through our Etsy shop, etsy.com/shop/hellocitystore