Legal

Privacy Policy

This policy explains how Creast handles information when you use its local visual creative workspace and optional Pinterest integration.

1. About Creast

Creast is an AI-powered visual creative workspace for organizing visual references, managing creative assets, and building AI-assisted workflows. The current product runs locally on the user’s device.

2. Pinterest authentication

Creast connects to Pinterest through Pinterest’s official OAuth authorization flow. Creast does not collect or store your Pinterest password or Pinterest session cookies. You sign in to Pinterest on Pinterest’s own authorization page.

3. Information accessed with your permission

Creast accesses Pinterest information only after you choose to authorize the connection. The requested read-only scopes are:

• boards:read to list authorized Boards;
• pins:read to list authorized Pins; and
• user_accounts:read to identify the authorized Pinterest account.

Creast does not request Pinterest advertising or write permissions for this integration.

4. Credentials and tokens

OAuth client credentials and account tokens are handled by Creast’s local service and are not exposed through this public website. On Windows, sensitive credentials are stored using Windows Credential Manager and are isolated by Pinterest connection. They are not stored in browser LocalStorage or IndexedDB.

5. How Pinterest information is used

Authorized Pinterest account information, Boards, and Pins are used to provide the reference-browsing experience you request inside Creast. Creast does not sell Pinterest data. Creast does not claim ownership of content provided through Pinterest.

6. Local workspace data

Creative assets, references, and workspace records that you intentionally save may remain in the local application’s storage until you remove them. Disconnecting Pinterest removes the account’s OAuth credentials; it does not silently delete separate workspace items that you intentionally created or saved. You remain responsible for the content you choose to place in your workspace.

7. Disconnecting and revoking access

You can disconnect a Pinterest account from Creast at any time. Disconnecting removes the OAuth credentials associated with that connection from Creast’s secure local credential storage. You can also revoke Creast’s access from your Pinterest account settings. To request help with access revocation or deletion, contact us at chueng94@protonmail.com.

8. Data security

Creast limits Pinterest access to the permissions needed for the authorized experience and uses operating-system credential storage for sensitive authentication data. No system can guarantee absolute security, so users should keep their device and operating-system account secure.

9. Third-party services

Pinterest is a third-party service governed by its own terms and privacy practices. If a user separately configures an AI service in Creast and intentionally sends content to that service, the service’s own policies apply. Creast does not automatically authorize a third party to access your Pinterest account.

10. Changes to this policy

We may update this policy when Creast’s features or legal obligations change. Material changes will be reflected on this page with a revised effective date.

11. Contact

Questions about this policy, Pinterest access, or deletion requests can be sent to chueng94@protonmail.com.

Effective date: August 30, 2026