Privacy Policy — Tending Brain

This document is the official Privacy Policy of Tending Brain. Canonical URL: https://www.tendingbrain.com/privacy/. For the operating entity and contact details, see section 11 below.

1. Overview

Tending Brain ("we", "our", "us") publishes and sells digital products — printable PDF planners, AI prompt packs, Notion templates, and digital workbooks — designed for adults with ADHD-style brains.

This Privacy Policy explains what data we collect, how we use it, what rights you have, and how to contact us.

This policy applies to:

• The website www.tendingbrain.com
• Our internal automation tooling, including our Pinterest integration application ("TendingBrain Auto-Pin")
• Any direct customer interaction with us through our marketplace listings (Etsy, Lemon Squeezy, Amazon KDP, Gumroad)

We follow a principle of data minimization: we collect only what we need to operate the business and serve you.

2. Data we collect

2.1 From customers

• Name and email address — only when you purchase through our direct store. Purchases made on third-party marketplaces (Etsy, Amazon KDP, Lemon Squeezy storefront, Gumroad) are governed primarily by those platforms' own privacy policies.
• Payment metadata — last 4 digits of card, billing country, processor reference ID. We never see or store full card numbers.
• Communication content — if you contact us by email or marketplace messaging.

We do not collect: full payment card data, full browsing history, precise location data, third-party social profiles, or behavioral tracking beyond essential first-party analytics.

2.2 Pinterest API data (TendingBrain Auto-Pin application)

Our internal application accesses data via the Pinterest API only for the Tending Brain business account itself, never about Pinterest users who interact with our content. Specifically:

• Public board metadata for our own boards (names, descriptions, cover images)
• Pin metadata for pins we have published (impressions, clicks, saves, outbound link clicks) — used for internal analytics
• OAuth access and refresh tokens, stored encrypted on our infrastructure

We do not access, collect, or store data about Pinterest users who view, save, repin, click, or otherwise interact with our pins. We do not request scopes that would grant such access. The application is for internal business automation only and is not exposed to third parties.

3. How we use your data

• Order fulfillment — deliver purchased digital downloads
• Customer support — respond to inquiries about products and orders
• Tax and legal compliance — invoicing, VAT/sales tax reporting (most marketplace sales are handled by our Merchant of Record partners: Etsy, Lemon Squeezy, Amazon)
• Internal analytics — aggregate sales and pin performance data to inform product decisions
• Email communications — only with your explicit consent. Transactional emails (order confirmations, download links, refund notices) are sent on the legal basis of contract performance.

We do not: sell your data, share it with advertisers, use it for behavioral retargeting on other platforms, or transfer it outside the contracted processors listed in section 4.

4. Third-party processors

We use the following processors, each governed by their own privacy policies:

Pinterest API interactions are governed by Pinterest's Privacy Policy.

5. Your rights

5.1 Under GDPR (EU / EEA / UK residents)

You have the right to:

• Access the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Restriction — limit how we process your data
• Objection — object to processing on legitimate-interest grounds
• Portability — receive your data in a machine-readable format
• Lodge a complaint with your national supervisory authority

5.2 Under CCPA (California residents)

You have the right to:

• Know what personal information we collect, use, and disclose
• Delete personal information we have collected
• Opt out of the "sale" of personal information (note: we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

5.3 How to exercise your rights

Email [email protected] with your request. We respond within 30 days. Identity verification may be required for sensitive requests.

6. Data retention

• Customer order data — retained 7 years for tax and legal compliance, then deleted
• Email communications — retained 2 years, then deleted unless an ongoing customer relationship requires longer retention
• Pinterest API tokens and metadata — retained while the application is connected; deleted within 30 days of disconnection or account closure
• Marketing email subscriptions — retained until you unsubscribe; unsubscribe is honored within 72 hours

7. Children's privacy

Tending Brain products are designed for adults (18+). We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we delete it promptly. If you believe a child has provided us with data, contact [email protected].

8. International data transfers

This Charming Brand LLC is a U.S.-incorporated company. Data may be processed in the United States or in the European Union, depending on the processor. For transfers from the EU/EEA/UK to the United States, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

9. Security

We use industry-standard security practices: encryption in transit (TLS) and at rest, principle of least privilege for internal access, two-factor authentication on all administrative accounts, and regular review of third-party processor security posture.

No system is perfectly secure. If we discover a breach affecting your personal data, we will notify you and the relevant supervisory authorities within the legally required timeframes.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to active customers and prominently displayed at our canonical URL. The "Last updated" date at the top reflects the most recent revision.

11. Contact

This Charming Brand LLC (DBA Tending Brain)
Wyoming, United States

• General privacy inquiries: [email protected]
• Pinterest API / application inquiries: [email protected]
• General contact: [email protected]

For European Union residents, you may also contact your national Data Protection Authority directly.