Privacy Policy

This Privacy Policy explains how LoLoBerry collects, uses, stores, and protects information when you use the website and service.

LoLoBerry is designed for social media management workflows, including account connection, private media management, API-based publishing, content sync, and publication history.

Account and access data: email address, authentication identifiers, role or administrator status, session data, preferences, and basic profile information needed to sign in and secure the service.

Connected social account data: platform names, platform account identifiers, usernames, display names, avatars, OAuth scopes, encrypted access tokens, encrypted refresh tokens, token expiry times, connection status, and internal account marks that you add in LoLoBerry.

Content and media data: files you upload, generated video preview images, captions, titles, descriptions, target accounts, platform-specific publishing settings, submitted API payloads, publication history, external post identifiers, external post URLs, platform error messages, and related diagnostics.

Synced platform data: for accounts you authorize, LoLoBerry may retrieve your own published posts, comparable metrics, platform-specific metrics, media metadata, provider response details, and sync status records.

Technical and security data: device/browser details, IP-derived approximate location, request logs, operational events, error reports, security telemetry, and timestamps needed to run, protect, and troubleshoot the service.

We use information to authenticate users, provide LoLoBerry, connect authorized social accounts, upload and retrieve private media, publish content through platform APIs at your direction, record publishing outcomes, show history, and poll or receive final platform status updates.

We use connected-account and synced content data to display account identity, show your own published content, refresh latest metrics, diagnose sync or publishing failures, and map provider errors into operational messages.

We use technical and security data to prevent abuse, investigate errors, maintain reliability, protect credentials, and support limited product reliability analysis. We do not use Pinterest content or Pinterest-derived data for advertising profiles, resale, or redistribution.

LoLoBerry stores sensitive OAuth tokens and platform credentials in encrypted form where technically supported by the service architecture.

These credentials are used only to connect accounts, refresh access, and perform actions that you request, such as publishing content to a selected platform account.

When you disconnect a social account, LoLoBerry disables the local connection and clears locally stored provider tokens for that account. Some historical records may remain so that publication history, audit trails, and troubleshooting context stay accurate.

LoLoBerry uses the Pinterest API to connect Pinterest accounts you authorize, retrieve account and board information needed for publishing, publish Pins that you submit, and sync metadata for Pinterest content owned by the authorized account.

LoLoBerry is not endorsed, certified, sponsored by, or affiliated with Pinterest. Pinterest is a third-party platform, and your use of Pinterest remains subject to Pinterest's own terms, policies, and privacy notices.

We do not sell, rent, trade, redistribute, or otherwise make available Pinterest content or Pinterest-derived data to third parties. We do not use Pinterest content or Pinterest-derived data to build unrelated datasets or services.

If you disconnect Pinterest, LoLoBerry clears locally stored Pinterest OAuth tokens and disables the local Pinterest connection. Pinterest-sourced synced content and metrics are no longer refreshed. Historical publishing records, error records, and necessary audit records may be retained; you may contact us to request deletion of locally stored Pinterest-sourced synced content where deletion is technically and legally permitted.

We share information with third-party social platforms only as needed to authenticate, connect accounts, upload media, publish content, retrieve account metadata, or comply with platform API requirements.

We use service providers such as Supabase for database and authentication, Vercel for hosting and queue execution, Cloudflare R2 for private media storage, and Slack webhooks if you configure publish-result notifications. These providers process information only as needed to operate LoLoBerry.

We do not sell personal information. We do not sell, sublicense, or redistribute social-platform content or data obtained through platform APIs, including Pinterest content or Pinterest-derived data.

We may disclose information where required by law, to protect rights and safety, to prevent abuse, or in connection with a business transaction such as a merger, acquisition, or asset transfer.

The website and service may use cookies, local storage, and similar technologies for authentication, session management, security, preferences, analytics, and product functionality.

Browser settings may allow you to block or delete cookies, but some service features may stop working if required cookies or storage are disabled.

Account records are retained while your LoLoBerry account remains active and for a reasonable period afterward if needed for security, legal compliance, dispute resolution, or operational recovery.

Connected-account metadata, encrypted OAuth tokens, and refresh tokens are retained while the account remains connected. When an account is disconnected, local provider tokens are cleared and the account row is disabled so past publishing history can still identify the account.

Uploaded media, generated previews, publishing payloads, published-post history, external identifiers, platform errors, and synced content records are retained while needed to provide the service, show history, troubleshoot failures, support audit trails, and comply with legal obligations. You may contact us to request deletion of data that is no longer needed for these purposes.

Operational logs, security telemetry, and diagnostics are kept for a limited period appropriate for reliability, fraud prevention, and security investigation, unless a longer retention period is required to resolve an incident or comply with law.

Content published to third-party platforms may remain available on those platforms according to their policies even if removed from LoLoBerry.

We use administrative, technical, and organizational safeguards intended to protect information against unauthorized access, loss, misuse, or alteration.

Private media is stored in a private object-storage bucket and accessed through signed URLs. Provider tokens and notification secrets are encrypted before storage where technically supported.

No online service can guarantee absolute security. You are responsible for protecting your account credentials and connected platform accounts.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information.

You can disconnect social accounts inside LoLoBerry. To submit a data access, correction, deletion, export, or Pinterest-data request, contact us using the email below. We may need to verify your identity before processing a request.

Questions, privacy requests, or requests about Pinterest content and Pinterest-derived data can be sent to support@hushuo.space.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated effective date.