Privacy Policy
Last updated: 2 October 2026
This Privacy Policy explains what personal data the PinPilot application (the "Application") and the pinpilot.ru website (the "Website") collect, for what purposes, on what legal grounds, how long the data is retained, and how a data subject may exercise their rights.
1. Data controller
Controller: Ivanov Vladimir, INN 525703607700, operating under the special tax regime "Professional Income Tax" (self-employed).
- Email: support@pinpilot.ru
- Website: https://pinpilot.ru
- VK community: https://vk.com/pinpilot
You may use these contacts for any question about personal data processing, including requests for access, rectification, blocking or deletion of data.
2. What data we process
2.1. Data transmitted to the server when a licence is purchased and activated:
- Email address — provided by the buyer at checkout
- Nickname — provided by the buyer to identify the account
- First and last name — provided by the buyer at checkout
- Device identifier (ANDROID_ID) — read automatically by the Application on licence activation to bind the key to the device
- Purchase date and licence status — generated automatically
- Date of the last licence check — generated automatically when the Application contacts the server
2.2. Affiliate programme data. When registering in the affiliate programme we process your email address, name and password. The password is stored only as an irreversible hash (bcrypt) and is never kept or transmitted in plain text.
2.3. Data that stays on the device and is not transmitted to the server:
- Pinterest cookies — used to perform actions in Pinterest on the user's behalf
- Activity statistics — number of posts, likes, follows and errors
- Automation settings, collections and image files
2.4. Data collected automatically on the Website. When you visit the Website we process your IP address, browser and device information, cookies and data about the pages you view. For this we use web analytics services:
- Yandex.Metrica (YANDEX LLC) — data processing terms
- Google Analytics 4 (Google LLC) — privacy policy
Analytics data is collected only after the visitor gives consent in the cookie banner. Before consent is given, analytics counters are not loaded. See the Cookie Policy for details. You may withdraw consent to analytics cookies at any time by clearing the saved choice in your browser settings.
2.5. Data we do not process. The Application does not request or process special categories of personal data (race, nationality, political views, religious beliefs, health, intimate life), biometric personal data, or data of persons under 18 years of age.
3. Purposes of processing
- Placing an order, activating and verifying the licence, binding the key to the device
- Identifying the buyer and providing access to the purchased product
- Informing about order status, updates and changes in the Application
- Responding to support requests
- Operating the affiliate programme and calculating commissions
- Improving the Website and the Application based on aggregated statistics
- Complying with obligations imposed by the legislation of the Russian Federation
4. Legal grounds for processing
- Federal Law No. 152-FZ of 27 July 2006 "On Personal Data"
- Consent of the data subject to the processing of their personal data
- Performance of a contract to which the data subject is a party (the public offer published on the Website)
- Performance of the controller's duties imposed by the legislation of the Russian Federation
5. Retention periods
- Licence data (email, nickname, name, device identifier, purchase date and status) — 3 (three) years from the last activation or licence check. This period is required to confirm the purchase and provide support throughout the product's lifetime.
- Affiliate programme data — 3 (three) years from termination of the affiliate relationship or from the last commission payout.
- Data stored on the device (Pinterest cookies, settings, statistics, collections) — until the user deletes the Application or clears the application data through the operating system.
- Server technical logs — no longer than 12 months from creation.
- Analytics data (Yandex.Metrica, Google Analytics) — retained according to the settings of those services, but no longer than 26 months.
- Support correspondence — 1 (one) year from the end of the request.
Once these periods expire, personal data is destroyed or anonymised. If the data subject withdraws consent or requests deletion, processing stops and the data is destroyed within 30 (thirty) days, except where processing must continue by law.
6. Sharing data with third parties
The controller does not sell or transfer personal data to third parties, except in the following cases:
- Payment services — information required to complete the payment is transferred. Bank card details are processed solely by the payment service and are never transferred to the controller.
- Web analytics services — Yandex.Metrica and Google Analytics receive anonymised Website visit data as described in section 2.4.
- Authorised state bodies — upon a reasoned request in the manner established by the legislation of the Russian Federation.
Pinterest cookies are used solely to interact with Pinterest on the user's behalf and are not transferred to third parties.
7. Where data is stored
- On the controller's server, located in the territory of the Russian Federation: licence key, device identifier, email address, nickname, name, purchase date, licence status.
- On the user's device: Pinterest cookies, settings, statistics, image collection files.
Data on the server is transmitted over the secure HTTPS protocol. Access is restricted and granted to the controller only.
8. Your rights
You have the right to:
- obtain information about the processing of your personal data;
- request rectification, blocking or destruction of data that is incomplete, outdated, inaccurate, unlawfully obtained or unnecessary for the stated purpose;
- withdraw consent to the processing of personal data;
- request deletion of your data;
- lodge a complaint with Roskomnadzor or with a court.
To exercise any of these rights, send a request to support@pinpilot.ru from the email address provided at purchase. The controller reviews and answers requests within 30 (thirty) days of receipt.
9. Withdrawing consent and deleting data
Consent to the processing of personal data may be withdrawn at any time. Simply send an email to support@pinpilot.ru with the subject "Withdraw consent" or "Delete data".
Upon receipt of the request, processing stops and the data is destroyed within 30 (thirty) days. Please note: deleting licence data makes further activation of the key and support for the purchased product impossible.
Local data is deleted when the Application is removed from the device or via the operating system settings ("Clear data").
10. Cookies
The Website uses cookies necessary for its operation and analytics cookies. Analytics cookies are enabled only after the visitor gives consent. A detailed description of cookie categories, their purpose and opt-out options is provided in the Cookie Policy.
11. Changes to this policy
The controller may amend this Policy. The current version is always available at https://pinpilot.ru/en/privacy. The date of the last update is shown at the top of the document. Continued use of the Application or the Website after a new version is published constitutes acceptance of the changes.
12. Contacts
For any questions related to personal data processing, please contact:
- Email: support@pinpilot.ru
- Website: https://pinpilot.ru
- VK community: https://vk.com/pinpilot