Privacy Policy

Last updated: 14 July 2026
Service: Orping (orping.net) — AI Pinterest pin studio
Operator: ORBITENSA LLC (and affiliates operating Orping)

This Privacy Policy explains what we collect, why we collect it, and your choices. By using Orping you agree to this policy and our Terms of Service.

1. Who we are

Orping helps signed-in users turn product or article links (or uploaded images) into on-brand Pinterest pin creatives and SEO copy. Contact for privacy requests: [email protected] (or the contact email listed on orping.net).

2. Data we collect

Account & authentication

• Email address, name (optional), password hash (if you use email/password)
• Google account identifiers when you sign in with Google OAuth
• Session / refresh tokens (httpOnly cookies and short-lived access tokens)

Product usage

• Brand kits (colors, username, tone, style preferences)
• Packs and pins (source URLs, uploaded source images, generated images, pin copy, status)
• Credit balance and ledger entries (grants, renders, refunds, top-ups)
• Billing-related identifiers (e.g. Stripe customer id) — card data is handled by Stripe, not stored by us

Technical & logs

• IP address, user agent, approximate request metadata for security and abuse prevention
• Application logs and error diagnostics

Communications

• Messages you send us (support, feedback)

Optional third-party connections (when enabled)

• If you connect Pinterest or other platforms: OAuth tokens and account identifiers needed to publish on your behalf, stored encrypted where applicable

3. How we use data

• Provide, secure, and improve the Service (generation, storage, export, billing)
• Authenticate you and maintain sessions
• Process payments and credits via Stripe
• Prevent fraud, abuse, and security incidents
• Comply with law and enforce our Terms
• Communicate about the Service (transactional email; marketing only if you opt in where required)

We use AI / image generation providers (e.g. model APIs) to produce pin images and copy. Content you submit (images, URLs, brand fields, prompts derived from your inputs) may be sent to those processors to fulfill your request.

4. Legal bases (where GDPR/UK GDPR apply)

• Contract — to deliver the Service you signed up for
• Legitimate interests — security, product improvement, analytics in a privacy-respecting way
• Consent — where required (e.g. certain cookies or marketing)
• Legal obligation — tax, accounting, lawful requests

5. Sharing

We do not sell your personal data. We share with:

| Recipient | Purpose | |-----------|---------| | Infrastructure (hosting, database, object storage, CDN) | Run the Service | | Stripe | Payments, subscriptions, invoices | | AI / media providers | Generate pin images and copy | | Auth providers (e.g. Google) | Sign-in | | Scraping / ingest helpers (e.g. Firecrawl) | Fetch listing metadata when you paste a URL | | Pinterest (if you connect) | Publish pins you authorize | | Professional advisors / law enforcement | When required by law or to protect rights |

Processors act under agreements that limit use to providing services to us.

6. International transfers

Data may be processed in the United States and other countries where our providers operate. Where required, we use appropriate safeguards (e.g. standard contractual clauses).

7. Retention

• Account data: while your account is active
• Content (packs, pins, uploads): while stored in your account or as needed for the Service
• Billing records: as required by tax/accounting law
• Logs: typically short periods unless needed for security investigations

You may request deletion of your account; we will delete or anonymize personal data except where we must retain it (law, disputes, security).

8. Security

We use industry-standard measures (HTTPS, hashed passwords, access controls, restricted secrets). No method of transmission or storage is 100% secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing, and to withdraw consent. Contact [email protected]. You may also lodge a complaint with a supervisory authority.

10. Children

Orping is not directed to children under 16 (or higher age where required). We do not knowingly collect data from children.

11. Cookies

We use essential cookies (e.g. session / refresh) for authentication. See Cookie Policy.

12. Changes

We may update this policy. Material changes will be posted on this page with a new “Last updated” date. Continued use after changes means you accept the updated policy.

13. Contact

[email protected] · Orping / ORBITENSA LLC · Website: orping.net