KoloreTech DesignCo ("we," "our," or "us") operates the website
koloretechdesignco.org and the Etsy shop
ProfessionalAndPetty.
This Privacy Policy explains how we collect, use, and protect information in connection with
our website, our Pinterest API integration, and our Meta (Facebook) API integration.
The most important thing to understand about our software integrations: they publish
our own content to our own accounts and Pages. We do not offer a login, sign-up, or
account-connection flow to the public. No member of the public can connect a Facebook, Instagram, or
Pinterest account to our applications, because no such flow exists. As a result, we hold no personal
data belonging to any third-party social media user.
1. What Data We Collect
We collect the minimum information necessary to operate our business:
- Etsy transaction data: Order information including name, shipping address, and product details — collected and used solely to fulfill print-on-demand orders placed through Etsy.
- Pinterest account information: When you connect your Pinterest account via our Pinterest API integration, we may access your public profile information and board data solely to create and publish Pinterest pins on your behalf.
- Website analytics: Basic browsing data (pages visited, referrer) collected via standard server logs for site improvement purposes only.
- No sensitive personal data: We do not collect Social Security numbers, financial account information, health data, or other sensitive categories beyond what is required for order fulfillment.
Data retention: Order data is retained for a minimum of 2 years for tax and fulfillment purposes. Pinterest API tokens and account data are retained only as long as you maintain an active connection with our app and are deleted within 30 days upon your request to disconnect.
2. How We Use Your Data
Your data is used exclusively for the following purposes:
- Order fulfillment: Etsy order information is used solely to process and ship your print-on-demand product.
- Pinterest API posting: We use the Pinterest API to create and schedule pins featuring our product images and Etsy listing links. This involves:
- Reading your public Pinterest profile and board information to identify the appropriate board for pin publication
- Creating pins with product images, descriptions, and links back to our Etsy listings
- Scheduling pins for future publication dates
- Accessing aggregate analytics on pin performance (impressions, saves, clicks) solely to optimize our content strategy
- Marketing communications: We do not send marketing emails. Any promotional activity occurs exclusively through Pinterest and Etsy platforms.
3. Pinterest API Data — Specific Disclosures
In compliance with Pinterest's Platform Terms and Developer Policies, we make the following explicit disclosures regarding Pinterest-derived data:
- No resale or redistribution: We do not sell, license, or redistribute any Pinterest-derived data — including pin content, board information, user engagement metrics, or any data obtained through the Pinterest API — to any third party.
- API usage scope: Our Pinterest app (App ID: 1556002) is approved for the following scopes only:
boards:read, boards:write, pins:read, pins:write. We do not access or use any Pinterest advertising data, demographic data, or user contact information.
- Data after disconnect: If you revoke access to our Pinterest app, we will delete all Pinterest-derived data (including access tokens, board IDs, and pin identifiers) within 30 days. Aggregate performance metrics already used for content optimization are retained in anonymized, aggregated form only — they cannot be traced back to any individual Pinterest user.
- Independent operation: KoloreTech DesignCo's Pinterest integration is not endorsed by, affiliated with, or sponsored by Pinterest, Inc. Pinterest's name, logo, and API are trademarks of Pinterest, Inc.
- No secondary use: Pinterest data obtained through our API integration is used solely to operate our pin scheduling and content marketing service. It is not used for machine learning model training, training data sets, advertising profiling, or any purpose beyond content scheduling and analytics.
3a. Meta (Facebook) API Data — Specific Disclosures
In compliance with the Meta Platform Terms and Developer Policies, we make the following explicit disclosures regarding data accessed through the Meta (Facebook) Graph API:
- First-party use only: Our Meta application is used exclusively to publish content to Facebook Pages that KoloreTech DesignCo owns and administers. We do not access, request, collect, or store data belonging to any other Facebook user, Page, or business. The application offers no login or connection flow to the public, and no third party can authorize it against their account.
- Permissions requested, and why: Our app requests only the following permissions, used only for the purposes stated:
pages_show_list — to retrieve the list of Facebook Pages our own administrator account manages, so the correct Page can be selected for publication.pages_read_engagement — to read our own Pages' post metadata and confirm that a post published successfully.pages_manage_posts — to publish posts, and the accompanying first comment, to our own Pages.
We do not request or use instagram_content_publish, Page Public Content Access, advertising permissions, audience or demographic data, Insights beyond our own Pages, or any permission granting access to another person's content.
- No resale or redistribution: We do not sell, license, or redistribute any Meta-derived data — including post content, Page information, engagement metrics, or any data obtained through the Graph API — to any third party.
- No secondary use: Meta-derived data is used solely to publish and verify our own content. It is not used for machine learning or model training, training data sets, advertising profiling, audience building, or any purpose beyond publishing to our own Pages.
- Tokens and retention: Page access tokens are stored encrypted in our workflow automation environment and are used only to publish to our own Pages. Tokens are rotated on a recurring schedule and revoked immediately if the integration is retired. We retain no Meta user data, because we collect none.
- Data deletion: Because the app collects no data from any third-party user, there is no third-party data to delete. Any Meta-derived data associated with our own Pages — access tokens and post identifiers — is deleted within 30 days of a request or of the integration being disconnected. See our Data Deletion Instructions.
- Independent operation: KoloreTech DesignCo's Meta integration is not endorsed by, affiliated with, or sponsored by Meta Platforms, Inc. Facebook, Instagram, and Meta are trademarks of Meta Platforms, Inc.
4. Third-Party Data Sharing
We share your data only in the following limited circumstances:
- Print-on-demand fulfillment: Order details (name, shipping address, product specifications) are shared with Printify's production network to manufacture and ship your product. This is the only data shared for order fulfillment purposes.
- Legal obligations: We may disclose data if required by law, court order, or governmental regulation.
- No data brokers: We do not sell or share data with data brokers, advertising networks, or analytics firms.
5. Data Security
We implement standard security measures including SSL/TLS encryption on all data transmissions, secure storage with restricted access controls, and routine password and credential rotation. No data transmission over the internet can be guaranteed 100% secure, but we take commercially reasonable steps to protect your data.
6. Cookies and Tracking
Our website uses minimal tracking:
- Essential cookies: None required for basic site operation.
- Analytics: We do not use Google Analytics, Facebook Pixel, or similar third-party trackers on koloretechdesignco.org.
- Pinterest conversion tracking: If you click through from a Pinterest pin to our Etsy listing, Etsy and Pinterest may use their own tracking pixels per their respective privacy policies. We do not control and are not responsible for tracking by those platforms.
- Our Meta integration involves no tracking: Our use of the Meta Graph API is for publishing to our own Pages only (see Section 3a). It involves no tracking pixel, no visitor tracking, and no collection of any website visitor's data.
7. Children's Privacy
Our services are not directed to or intended for children under 13. We do not knowingly collect data from children under 13.
8. Your Rights Under CCPA/CPRA (California Residents)
California residents have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
10. Contact Us
For any questions about this Privacy Policy, to request deletion of data, or to report a data concern, contact us: