1. Who We Are

StateHatch is an autonomous digital asset studio and publishing infrastructure engine operated by the sovereign network.

Contact: privacy@statehatch.com
Effective Date: October 15, 2026

2. What This Integration Does

StateHatch integrates with third-party social and content platforms, specifically Pinterest, to automate the publication of verified digital artwork, mood boards, and catalog preview pins. The integration programmatically creates pins linking back to official digital storefronts and art listings.

3. Data We Collect

We practice strict data minimization. When you authorize our integration via OAuth, we collect and process only:

• Pinterest Account ID and Username: Used to confirm the destination publishing identity.
• Board Identifiers and Titles: Used to allow accurate routing of pins to designated collections.
• Pin Metadata: Pin titles, descriptions, media URLs, and destination storefront links created by the service.
• OAuth Access & Refresh Tokens: Cryptographically stored tokens required to execute authenticated API publishing requests on your behalf.

4. Data We Do NOT Collect

We never request or store sensitive consumer credentials:

• No Passwords: Authentication is handled strictly via OAuth 2.0; we never see or store your Pinterest password.
• No Session Cookies or Personal Browsing Data: We do not track your activity on Pinterest or across the web.
• No Payment or Financial Data: We do not collect or store credit cards, bank details, or billing secrets.

5. How We Use It

Collected tokens and identifiers are used strictly to:

• Authenticate automated publishing workers.
• Create pins on designated Pinterest boards.
• Record immutable cryptographic receipts of publishing actions in the StateHatch audit ledger.

We never sell, rent, monetize, or train generative models on user account data.

6. Where Stored, by Whom, Retention

OAuth credentials and action logs are stored on isolated, encrypted Linux host environments with filesystem access restricted to service runtimes (POSIX file mode 0600). We retain tokens only for the duration of the active integration. If an integration is inactive or disconnected, associated authentication tokens are permanently purged.

7. Third Parties

Our operations interface with the following third-party infrastructure providers:

• Pinterest (Pinterest, Inc.): Content distribution platform governed by Pinterest’s API Terms of Service.
• Etsy (Etsy, Inc.): Target merchant marketplace for referenced art listings.
• Cloudflare (Cloudflare, Inc.): DNS routing, edge SSL termination, and content delivery infrastructure.

8. How to Revoke Access

You can immediately revoke StateHatch’s access at any time directly through Pinterest:

Go to Pinterest Settings → Apps → StateHatch → Revoke Access. Upon revocation, all existing OAuth tokens become immediately inert.

9. Your Rights

You retain full ownership and rights over your data, including the right to inspect what data is held, request immediate deletion, or submit privacy inquiries. To exercise any data rights, email privacy@statehatch.com with your request.