Privacy Policy & Developer Disclosures

1. Application & Entity Identity

This Privacy Policy governs the operation of Divine Poured ("we", "our", "us", or "the Studio"), operating the e-commerce and artisan gallery website available at https://divinepoured.com.

Divine Poured is an India-based luxury resin art atelier specializing in handcrafted geode wall art, epoxy serving boards, agate coasters, and festive decor. In order to showcase our artisanal collections to global design enthusiasts and art collectors, we integrate with third-party developer platforms, including the Pinterest Developer API.

2. Information We Collect

We collect information in the following categories to provide art collector services, process orders, and maintain technical performance:

A. Information You Provide Directly to Us:

• Contact & Account Information: Full name, email address, phone/WhatsApp number, and postal delivery address provided during checkout or custom bespoke inquiries.
• Order Details: Items purchased, dimensions, custom monogram or Sanskrit shloka personalization notes, invoice records, and shipping tracking updates.
• Customer Communications: Inquiries submitted via our contact forms, direct email, or authenticated studio WhatsApp messages.

B. Information Collected Automatically:

• Device & Usage Information: Browser type, operating system version, referring URL, time stamp, pages visited, and interaction data within our 3D Room Visualizer.
• IP Address & Geolocation: Approximate city/region derived from standard server logs to calculate accurate domestic shipping rates and prevent payment fraud.

3. Pinterest Developer API Integration & Data Handling

When you connect your Pinterest account with Divine Poured or when our studio application interacts with the Pinterest API, we access only the minimal API permissions explicitly authorized by you or required to operate our verified integration:

• OAuth 2.0 Credentials: When authorized, we receive temporary, scoped OAuth 2.0 access tokens that permit our backend to authenticate API calls on behalf of the application or the user.
• Boards and Pins Data: Permissions to read, create, or update Pins, Board titles, and Pin descriptions (e.g. creating Rich Pins featuring Divine Poured geode resin artwork with verified pricing, titles, and atelier descriptions).
• Account & Profile Identifiers: Basic public profile identifiers (such as username or business account ID) strictly required to map your account with published collections.
• Analytics & Engagement Metrics: Aggregate impression, click-through, and save counts provided by the Pinterest API to evaluate which handcrafted designs resonate with collectors.

4. Absolute Non-Sale of User Data & Prohibited Practices

In strict compliance with Section 3 of the Pinterest Developer and API Terms of Service, Divine Poured makes the following irrevocable guarantees:

• Zero Data Monetization: We do NOT sell, rent, lease, trade, exchange, or transfer Pinterest User Data or any customer personal information to third parties, data brokers, advertising aggregators, or list brokers under any circumstances.
• No Unauthorized Surveillance or Profiling: We will never use Pinterest Data to conduct user surveillance, facial recognition, credit scoring, employment eligibility evaluations, health assessment, or discrimination against any individual.
• No Circumvention: We do not circumvent or attempt to bypass any privacy controls or rate limits established by Pinterest.
• Strict Purpose Limitation: Pinterest Data is used solely for the documented functionality of publishing, showcasing, and analyzing our artisan collections on the Pinterest platform.

5. Purpose and Legal Basis for Processing

We process information under the following lawful bases:

• Contractual Performance: To process orders, handcraft bespoke resin art according to client specifications, securely package fragile artwork, and arrange door-to-door insured logistics across India.
• Legitimate Interests: To maintain website security, prevent fraudulent transactions, optimize our 3D room preview performance, and synchronize artistic imagery with our official Pinterest business boards.
• User Consent: For voluntary newsletter subscriptions, customized WhatsApp art progress videos, and when you grant OAuth permissions to connect with third-party platforms like Pinterest.
• Legal Compliance: To comply with applicable tax, accounting (GST in India), and consumer protection regulations.

6. Data Storage, Encryption & Security Standards

Divine Poured implements enterprise-grade administrative, technical, and physical safeguards to safeguard all customer and platform data:

• In-Transit Encryption: All communications between your browser, our servers, and the Pinterest API are encrypted via Transport Layer Security (TLS 1.3 / HTTPS).
• Token Encryption at Rest: All Pinterest OAuth access tokens and API secrets are stored encrypted at rest using AES-256 encryption within restricted server environments.
• No Raw Card Storage: Payment card numbers, CVVs, and net-banking credentials are processed directly by PCI-DSS Level 1 certified payment gateways (e.g. Razorpay). Divine Poured never sees or stores complete card numbers on its servers.
• Access Controls: Server access is strictly restricted to authenticated studio administrators with multi-factor authentication (MFA) and audited access logs.

7. Pinterest Account Disconnection & Data Deletion Procedure

We uphold your absolute right to control your digital footprint. Users may revoke Divine Poured’s access to their Pinterest account at any time or request complete erasure of all associated data.

8. Cookies, Web Beacons & Pinterest Tag Disclosures

We use functional cookies and standard analytics technologies to ensure seamless navigation, shopping bag persistence, and conversion measurement:

• Essential Cookies: Required to maintain your cart contents, wishlist selections, and authenticated session tokens.
• Pinterest Tag & Conversions API: We may implement the Pinterest Tag (a lightweight JavaScript snippet) or Pinterest API for Conversions to measure ad efficacy and report anonymous shopping events (such as viewing a resin art piece or completing a purchase). This helps us measure ad performance without collecting unauthorized sensitive personal data.
• Opting Out: You can configure your browser to reject cookies or use browser extensions like Privacy Badger. You may also opt out of personalized Pinterest ads directly through Pinterest’s Personalization Settings.

9. Third-Party Service Providers

We partner with reputable third-party infrastructure and logistics services under strict confidentiality agreements:

• Pinterest, Inc.: Developer platform for catalog pinning, visual discovery, and rich pin synchronization.
• Payment Processors (Razorpay, UPI): Secure transaction execution complying with RBI and PCI-DSS requirements.
• Transactional Communications (Brevo, Fast2SMS): For order verification SMS one-time passwords (OTP) and automated invoice delivery via email.
• Courier & Logistics Partners (Shiprocket, Bluedart, Delhivery): For secure, damage-insured delivery of handcrafted resin pieces across India.

10. Global Privacy Rights & Legal Disclosures

A. European Union & UK (GDPR / UK GDPR):

If you reside in the EEA or UK, you possess the following rights under GDPR:

• Right of access to your personal data and Pinterest API mappings.
• Right to rectification of incorrect or outdated records.
• Right to erasure ("Right to be Forgotten") without undue delay.
• Right to data portability and restriction of processing.

B. California Residents (CCPA / CPRA):

Under the California Consumer Privacy Act (CCPA), as amended by CPRA:

• Right to Know & Delete: You can request details on categories of data collected and request deletion.
• Notice of Non-Sale: Divine Poured has not sold or shared consumers’ personal information or Pinterest data in the preceding 12 months and will not do so.
• Non-Discrimination: We will never discriminate against you (in pricing, art quality, or support) for exercising your privacy rights.

C. India (Digital Personal Data Protection Act, 2023):

We adhere to the DPDP Act 2023 regarding lawful consent, purpose limitation, reasonable security safeguards, and the prompt resolution of data principal grievances.

11. Children's Privacy Protection

Divine Poured’s services and Pinterest integrations are not directed toward children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal data or authorize Pinterest connections from minors. If you believe a minor has provided information to us, please notify us at [email protected] for immediate deletion.

12. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect evolving studio practices, new Pinterest Developer API features, or legal updates. When significant modifications occur, we will update the "Effective Date" at the top of this document. We encourage users and developer auditors to review this page periodically.

13. Grievance Officer & Contact Details

For any privacy inquiries, data subject access requests, or questions regarding our Pinterest Developer API integration, please reach out to our dedicated privacy contact: