Privacy Policy

1. Scope and operator

Mellow Foundry (the "Operator") operates Mellow Foundry Scheduler (the "Tool") to schedule images and product-page links for posting to Pinterest accounts owned or lawfully managed by the Operator. The Tool runs as the "Pinterest scheduling" feature within Pochirep.

The Tool's Pinterest app has been submitted and is awaiting review. It is not connected to any live Pinterest account. This Policy includes information handling planned after use begins. We will not begin connecting, retrieving information or posting until the necessary prior written permission to store Pinterest-derived information and the deletion requirements, including those for backups, have been confirmed.

This Policy explains how information is handled by the Tool and this information website. The relevant policies and agreements also apply to other features of Pochirep and to the overall handling of information by services such as Pinterest.

2. Information handled and purposes of use

• Account and connection information: Account IDs and usernames within the scope authorized on Pinterest's authorization screen, authentication tokens, permission scopes and expiry dates, and connection renewal dates, times and statuses are used to identify and maintain connections. Pinterest passwords are not entered into the Tool.
• Scheduling and posting information: Images, titles, descriptions, product-page links, image descriptions, destination board IDs and names, scheduled posting dates and times, processing statuses, and resulting Pin IDs, errors and similar information are used to store schedules, carry out posts and check the results.
• Authentication verification information: Temporary matching information is used to verify connection operations and prevent unauthorized connections.
• Inquiry information: When an inquiry is received, contact details and the content of the inquiry are used to understand and respond to it.

3. Storage and transmission to external services

Once use begins, scheduling and connection information will be stored in the Tool's dedicated storage area within a database in the Cloudflare environment managed by the Operator. The Tool communicates with Pinterest for authentication, connection maintenance, account and board checks, and designated posting. When posting, it transmits images, post content, product links and the posting destination.

Connection renewals and validity checks continue even while automatic posting is OFF. Switching automatic posting OFF, canceling a scheduled post or deleting linked data may not cancel an external request that has already started sending.

The pages of this information website do not include an inquiry form, analytics scripts, advertisements or external fonts. Inquiries are accepted by email. Browsing the website and responding to email involve information processing by hosting and email service providers.

Cloudflare, Pinterest and Google Workspace may process access information and other information to provide and protect their services and for related purposes, in accordance with their respective specifications, policies and agreements. Storage locations are not limited to Japan.

4. Retention and deletion

Once use begins, connection information will be retained only as long as needed to maintain the connection. When a request to disconnect or delete linked data is accepted through the admin interface, pending and in-progress scheduled posts, history records for completed operations, stored images, connection information and associated temporary authentication information for the account concerned are deleted together from active storage. If the Operator becomes aware of a deletion request, revocation of authorization or a similar event, the relevant information that is no longer needed is also deleted without undue delay. Information for other accounts is retained.

Images and content awaiting posting are retained until the designated post, cancellation of the schedule, deletion of linked data or a similar action. A scheduled posting time can be set no more than 1 year after the schedule is registered. This also applies to schedules with automatic posting OFF. Images associated with posted, failed or canceled posts are deleted from active storage. If processing is interrupted and the sending result cannot be confirmed, it is treated as failed during a periodic check after 15 minutes have elapsed from its start, and the image is deleted.

History records for completed operations, including account IDs, destination board IDs and names, and resulting Pin IDs, are due for deletion 30 days after completion and are deleted during periodic checks or when the admin interface is accessed. History records alone can also be deleted earlier through the admin interface. Disconnecting or deleting linked data also deletes the history records without waiting 30 days. This 30-day period does not mean that routine storage is uniformly permitted for that duration. Information is not retained beyond the scope of the necessary storage permission.

In principle, connection validity is checked once a day, whether automatic posting is ON or OFF. If a connection is confirmed to be unusable even after the authentication information has been refreshed, or if the connection renewal deadline has passed, the linked data for that account is deleted. Automatic posting is stopped in the event of a temporary communication failure or a similar issue. If 30 days have elapsed since a connection was last confirmed valid, its linked data is deleted at the next periodic check or access to the admin interface. Immediate notification from Pinterest of authorization revocation or similar events is not guaranteed.

Disconnecting through the Tool is separate from revoking authorization on Pinterest. To revoke the connection permission on Pinterest, also complete the procedure on Pinterest. Deletion through the Tool does not delete Pins already created on Pinterest. Manage posted Pins on Pinterest.

Information deleted from active storage may remain in Cloudflare recovery backups or similar copies for a period of time. Deletion requirements, including those for backups, must be confirmed before use begins. Automatic deletion does not proceed while the Tool or its periodic processing is stopped. We will therefore also confirm operational arrangements for deletion when operation is stopped or discontinued, and for preventing deleted information from being reused upon restoration.

Information received in inquiries is used to respond to the inquiry and keep necessary records. Information that is no longer needed for the response, legally required retention or similar purposes is deleted.

5. Cookies and information protection

A temporary cookie valid for 10 minutes is used for verification when connecting to Pinterest. Matching information is also valid for 10 minutes and is deleted when the connection succeeds or through periodic processing or similar means after expiry. Pochirep separately uses cookies for login.

The admin interface is protected by login and does not display authentication token values or app secret values. The plugin is implemented so that its logs do not record secrets, tokens or authorization codes.

6. Contact for inquiries and requests

For questions, complaints or requests concerning information handled by the Tool, including requests for disclosure, correction, suspension of use or deletion, contact us at the address below. We will confirm the information concerned and the details of the request, verify your identity where necessary, and respond in accordance with applicable law. You do not need to include passwords or authentication tokens in email.

Information that must be provided under applicable law, such as the business operator's name and address, will also be provided without undue delay upon request through this contact point.

7. Changes to this Policy

If functions, the information handled, purposes of use or similar matters change, we will update this Policy to reflect the actual circumstances and provide any necessary notices.