1. Scope
This Privacy Policy explains how Poni Post, a web-based content publishing and scheduling application developed by Poni Klark Studio, handles information when an authorized operator connects social-media accounts and uses the publishing dashboard.
2. Information processed
Depending on the connected platform and features used, Poni Post may process:
- account and profile identifiers returned by the connected platform;
- OAuth access tokens and refresh tokens needed to maintain an authorized connection;
- the studio's own board, Pin, channel or publication metadata needed to select destinations and show status;
- content prepared for publication, such as text, links, images, videos and scheduling information;
- technical logs required to diagnose publishing or connection errors.
Poni Post does not request or store the password of a connected social-media account. Authorization is performed through the platform's OAuth flow.
3. How information is used
Information is used only to operate Poni Post: authenticate an authorized account, display the studio's own destinations and metadata, create or schedule publications, send approved content to the selected platform, show publication results, and troubleshoot errors.
4. Pinterest data
When Pinterest is connected, Poni Post is intended to access only data made available for the Pinterest account explicitly authorized through OAuth. Pinterest data is used to read the studio's own boards and Pin metadata, select a destination board, create or schedule the studio's own Pins, and display publishing results.
Pinterest data is not sold, rented, used for advertising profiles, or shared with unrelated third parties.
5. Storage and security
Poni Post uses private cloud infrastructure to store application data. Connected-platform secrets are encrypted at rest using authenticated encryption, administrative access is password protected, and browser access is served over HTTPS.
Only information reasonably necessary for the application's publishing functions is retained.
6. Retention and deletion
OAuth credentials are retained while a platform connection remains active. Disconnecting a platform in Poni Post removes the stored credentials for that connection. Publication drafts, media and operational records may be retained until they are deleted by the studio operator or are no longer needed for the application's purpose.
The operator can also revoke Poni Post's access from the connected platform's own account settings.
7. Service providers and disclosures
Poni Post sends information to a connected social platform only as required to perform actions authorized by the studio operator. Cloud infrastructure providers may process stored or transmitted data solely as infrastructure providers. Poni Post does not sell personal information.
8. Access and control
The authorized operator can disconnect social accounts, revoke OAuth authorization at the platform, and delete application content from the private dashboard. Questions or deletion requests may be submitted through the contact channel associated with the Poni Klark Studio developer application on the relevant platform.
9. Changes to this policy
This policy may be updated when Poni Post adds platforms or changes how it processes data. The current version will remain available at this URL with an updated revision date.