Privacy Policy — MiraMorrow

Effective date: 2026-08-15

This policy covers MiraMorrow's internal operations tool ("POD OS", "the app") and its use of the Pinterest API, the Instagram API, and the TikTok Content Posting API to manage social media content on behalf of the MiraMorrow Etsy shop.

Who operates this app

MiraMorrow is a single, owner-operated Etsy print-on-demand shop. This app is not a public or multi-tenant service — it connects only the MiraMorrow business's own Pinterest, Instagram, and TikTok accounts, operated by the shop owner. Contact: cem@northerstudio.com.

What data this app accesses

When you (the MiraMorrow account owner) connect a platform account, this app requests only:

• Pinterest: basic account identity (user_accounts:read), your boards (boards:read, boards:write), and your Pins (pins:read, pins:write) — used to create and manage Pins linking to MiraMorrow's Etsy listings.
• Instagram: basic Professional-account identity, content-publishing access, and insights (instagram_business_basic, instagram_business_content_publish, instagram_business_manage_insights) — used to publish posts/carousels/reels and read their performance.
• TikTok: basic account identity and video posting access (user.info.basic, video.publish, video.upload) — used to post or upload videos promoting MiraMorrow products.

How this data is stored and used

• Access and refresh tokens are encrypted at rest (AES-256-GCM) in the app's database.
• Tokens are never displayed in the app's UI, logged, or committed to source control.
• Data retrieved (account identity, board/Pin metadata, post performance metrics) is used solely to generate, schedule, publish, and analyze MiraMorrow's own social content — never sold, shared with third parties, or used for advertising/targeting outside this app.
• Content generated by this app before publishing (draft posts, images) goes through a human approval step — nothing is posted automatically without review, at least during the initial rollout.

Data retention and deletion

Connected-account tokens are retained until the account owner disconnects the platform in the app's Settings, or revokes access directly from Pinterest/Instagram/TikTok's own account settings. Disconnecting deletes the stored tokens immediately. To request deletion of any other data this app holds, contact cem@northerstudio.com.

Changes to this policy

Any material change to what data is accessed or how it is used will be reflected on this page with an updated effective date.

Contact

Questions about this policy or this app's use of your platform data: cem@northerstudio.com.