← Back to Home

Privacy Policy

Effective Date: February 2025

1. Introduction

Welcome to Exhalo. We are committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data collection and usage for our content creation app designed for Pinterest creators.

Exhalo is operated by Exhalo. If you have any questions or concerns about this Privacy Policy, please contact us at support@exhalo.app.

2. Information We Collect

We collect information to provide and improve our services to you. The types of information we collect include:

2.1 Account Information

When you create an account or use our services, we may collect:

• Email address
• Account credentials
• Profile information you choose to provide

2.2 Usage Data

We automatically collect information about how you interact with our services:

• Device information (browser type, operating system)
• IP address and general location data
• Pages visited and features used
• Time and date of access
• Error logs and diagnostic data

2.3 Third-Party Integration Data

When you connect third-party services like Pinterest to your Exhalo account, we access certain data from these platforms as described in Section 3 below.

3. Pinterest API Data Usage

3.1 What Pinterest Data We Access

When you authorize Exhalo to connect with your Pinterest account, we request access to:

• Your Pinterest boards and their details
• Your pins (including images, descriptions, and metadata)
• Your public profile information
• Permission to create and schedule new pins on your behalf

3.2 Real-Time Access Only – No Data Storage

3.3 How We Use Pinterest Data

We use your Pinterest data exclusively to provide the following services to you:

• Pin Search & Inspiration: Display your existing pins to help you find inspiration for new content
• Pin Creation: Create new pins on your boards with your explicit instruction
• Pin Scheduling: Schedule pins to be published at times you specify
• Board Management: Show your boards so you can select where to publish content

We use Pinterest data only to provide these services directly to you. We do not use your Pinterest data for any other purpose, including analytics, advertising, or training machine learning models.

3.4 No Third-Party Sharing of Pinterest Data

3.5 Your Control Over Pinterest Data

You have complete control over Exhalo's access to your Pinterest data:

• Disconnect Anytime: You can revoke Exhalo's access to your Pinterest account at any time through your Pinterest account settings or through Exhalo's app settings
• Selective Authorization: You control what permissions you grant to Exhalo during the Pinterest authorization process
• Immediate Effect: When you disconnect, Exhalo immediately loses all access to your Pinterest data

3.6 Compliance with Pinterest Policies

Exhalo fully complies with:

• Pinterest API Terms of Service
• Pinterest Developer Policy
• Pinterest Community Guidelines

We are committed to using Pinterest's API responsibly and in accordance with all applicable policies and guidelines.

4. How We Use Your Information

We use the information we collect (excluding Pinterest data, which is covered in Section 3) for the following purposes:

4.1 Service Delivery

• Provide, maintain, and improve our services
• Process your requests and transactions
• Authenticate your identity and maintain account security
• Enable features like pin scheduling

4.2 Service Improvements

• Analyze usage patterns to improve user experience
• Develop new features and functionality
• Fix bugs and troubleshoot technical issues
• Conduct research and testing

4.3 Communications

• Send you service-related announcements
• Respond to your inquiries and support requests
• Send important updates about changes to our policies or services
• Send optional promotional communications (with your consent, which you can withdraw at any time)

5. Data Retention & Security

5.1 Data Retention

Pinterest Data: As stated in Section 3.2, we do not store Pinterest API data. We access it in real-time only when needed.

Account Data: We retain your account information for as long as your account is active or as needed to provide you services. You may request deletion of your account at any time by contacting support@exhalo.app.

Usage Data: We retain usage logs and analytics data for up to 90 days for troubleshooting and service improvement purposes.

5.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Secure storage practices for any data we do retain

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable measures.

5.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable laws and take appropriate steps to mitigate any harm.

6. Third-Party Data Sharing

We may share limited non-Pinterest data only in the following circumstances:

6.1 Service Providers

We may share minimal necessary data with trusted service providers who assist us in operating our services, such as:

• Cloud hosting providers (for non-Pinterest data)
• Email service providers (for communications)
• Analytics services (aggregated, non-identifying data only)

These service providers are contractually obligated to protect your data and use it only for the specific services they provide to us. We never share Pinterest API data with any service providers.

6.2 Legal Requirements

We may disclose information if required by law, such as:

• To comply with legal process (subpoenas, court orders)
• To enforce our terms of service
• To protect the rights, property, or safety of Exhalo, our users, or others
• In connection with the investigation of fraud or security issues

6.3 Business Transfers

If Exhalo is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

7. Your Rights & Control

You have the following rights regarding your personal information:

7.1 Access and Export

You have the right to request a copy of the personal information we hold about you. Contact us at support@exhalo.app to request your data.

7.2 Correction

You can update or correct your account information at any time through your account settings or by contacting us.

7.3 Deletion

You have the right to request deletion of your account and associated personal information. To exercise this right:

• Contact us at support@exhalo.app with your deletion request
• We will process your request within 30 days
• Some information may be retained as required by law or for legitimate business purposes (e.g., transaction records)

7.4 Opt-Out of Communications

You can opt out of promotional emails by:

• Clicking the "unsubscribe" link in any promotional email
• Adjusting your notification preferences in account settings
• Contacting us at support@exhalo.app

Please note that you cannot opt out of essential service-related communications.

7.5 Disconnect Third-Party Integrations

You can disconnect Pinterest or other third-party integrations at any time:

• Through your Exhalo account settings
• Through your Pinterest account settings (https://www.pinterest.com/settings/apps/)
• By contacting us at support@exhalo.app

7.6 How to Exercise Your Rights

To exercise any of these rights, contact us at support@exhalo.app. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect usage data:

8.1 Types of Cookies We Use

• Essential Cookies: Required for the service to function (e.g., authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our service

8.2 How to Control Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may impact your ability to use certain features of our service. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies
• Receive notifications when cookies are set

9. International Users & GDPR Compliance

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

9.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for specific processing activities (e.g., connecting Pinterest)
• Contract Performance: Processing is necessary to provide services you've requested
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our service, security) that do not override your rights
• Legal Obligation: Processing is required by law

9.2 GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: Obtain confirmation of what personal data we process and receive a copy
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restriction: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.3 Data Transfers

Exhalo is based in the United States. If you are located outside the U.S., your information may be transferred to and processed in the U.S. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR requirements.

9.4 Contact for GDPR Inquiries

For any GDPR-related questions or to exercise your rights, contact us at support@exhalo.app with "GDPR Request" in the subject line.

10. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request:

• The categories and specific pieces of personal information we collect about you
• The categories of sources from which we collect personal information
• Our business or commercial purpose for collecting personal information
• The categories of third parties with whom we share personal information

10.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions under California law.

10.3 Right to Opt-Out of Sale

10.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. This means we will not:

• Deny you goods or services
• Charge different prices or rates
• Provide a different level of quality
• Suggest you will receive a different price or quality of services

10.5 How to Exercise CCPA Rights

To exercise your CCPA rights, contact us at:

• Email: support@exhalo.app
• Subject line: "CCPA Request"

We will verify your identity before processing your request and respond within 45 days.

10.6 Authorized Agent

You may designate an authorized agent to make CCPA requests on your behalf. We may require proof of authorization before processing such requests.

11. Children's Privacy

Exhalo is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

If you are between 13 and 18 years old, you must have parental or guardian consent before using our services.

If we become aware that we have collected personal information from a child under 13 without proper parental consent, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 13, please contact us immediately at support@exhalo.app.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make changes:

• We will update the "Effective Date" at the top of this policy
• We will notify you of material changes via email or prominent notice in our app
• For significant changes that affect how we handle Pinterest data or other sensitive information, we may require you to review and accept the updated policy

We encourage you to review this Privacy Policy periodically. Your continued use of Exhalo after changes are made constitutes acceptance of the updated policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 30 days. For urgent privacy or security concerns, please include "URGENT" in your email subject line.

---

Thank you for trusting Exhalo with your privacy. We are committed to protecting your personal information and using it responsibly.