Privacy Policy

1. Who we are

Martis (“we”, “us”) is a software development and data science company. Our Pinterest integration helps authenticated account owners understand their own metrics through clear summaries, explanations and practical insights. Questions and privacy requests can be submitted through our contact form.

2. Data we process

Depending on the read permissions a user authorizes, Martis may process:

• Account identifiers, username, profile and linked business identifiers.
• OAuth access and refresh tokens and the scopes granted by the user.
• IDs and metadata for the user’s Pins and Boards and, when separately enabled, advertising or catalog resources.
• Analytics, performance and trend information requested by the user.
• Questions, analysis preferences and report settings submitted by the user.
• Derived summaries and recommendations created from the user’s authorized metrics.
• Operational logs such as request time, status, error code and consent record.
• Contact information and messages voluntarily submitted through our contact form.

We do not ask for or collect Pinterest passwords, browser cookies or session cookies.

3. Why we process data

We process data only to provide analytics functionality requested by the authenticated account owner: retrieving the user’s own account resources, organizing and comparing performance over time, explaining metrics in plain language, preparing summaries and recommendations, diagnosing errors, and protecting the service from abuse. Martis does not use a user’s account data to create insights for unrelated people.

4. Legal bases

Where Brazilian data protection law applies, processing is based on the user’s consent, performance of requested services, legitimate interests in securing and improving the service, and compliance with legal obligations. Users may withdraw Pinterest authorization at any time.

5. Pinterest data, precision and reconciliation

Martis accesses Pinterest data only through official authorization mechanisms and only for the person who authorized access. We may retain the minimum identifiers, consent records, analysis settings and permitted account metrics necessary to operate and audit requested analyses.

To improve precision, Martis reconciles account and content identifiers, reporting periods, metric definitions, pagination and aggregation differences. Reports maintain traceability to the user’s authorized source data so discrepancies can be identified and explained.

6. AI-assisted processing

When the user requests an explanation, report or recommendation, relevant metrics and the user’s question may be processed by contracted infrastructure or AI service providers solely to deliver that analysis. We minimize the data sent and do not intentionally send Pinterest passwords, OAuth secrets or unrelated account data to generative models.

7. Sharing and service providers

We do not sell personal information. Data may be processed by hosting, security, observability and AI infrastructure providers acting on our behalf, or disclosed when required by law or necessary to protect users and the service. Providers receive only the information needed for their function and are subject to applicable contractual safeguards.

8. Storage, retention and security

We use reasonable administrative and technical safeguards, restrict access to authorized operators, and keep credentials out of public client-side code. Tokens are retained only while the Pinterest connection is active or as needed to complete authorized operations. Operational records are retained only as long as needed for security, troubleshooting and legal obligations. A verified deletion request is normally completed within 30 days unless retention is legally required.

9. International processing

Infrastructure providers may process information outside Brazil. Where required, we use appropriate safeguards for international transfers and limit processing to the purposes described in this policy.

10. Your choices and rights

Users may disconnect Pinterest, withdraw authorization, request access, correction, portability or deletion, and object to or restrict certain processing. Instructions are available on the Data Deletion page. Requests may require identity and account ownership verification.

11. Children

Martis is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children.

12. Cookies and hosting logs

This informational site does not use advertising cookies. Our hosting provider may process essential security and request logs. The contact form uses only the information a visitor chooses to submit.

13. Changes

We may update this policy when the product, law or platform rules change. The updated version will show a new “Last updated” date. Material changes will be communicated through an appropriate channel.

14. Contact

Submit privacy questions or data rights requests through the Martis contact form. Select “Privacy or data request” so the request can be prioritized.