Privacy Policy

1. Introduction

Picklett is a software service that lets online stores build interactive product finders. Merchants add their products, write questions, configure recommendation rules, publish or embed the finder on their own website, and review analytics about how shoppers use it.

This policy explains what information Picklett handles, why, and what choices you have. It covers two clearly different groups of people, and the difference matters throughout this document:

• Merchants — the businesses and individuals who create a Picklett account and build product finders.
• Shoppers — visitors to a merchant's website who interact with a product finder that the merchant published or embedded.

Questions about this policy can be sent to contact@picklett.com.

2. Merchant and account information we collect directly

Account information

When you create an account we collect your email address and authentication credentials. If you sign in with Google, we receive basic profile information from that sign-in (such as your email address and name) rather than a password.

Profile and business information

You may add a first name, last name, business name and industry to your profile. These are optional except where the product asks for them during onboarding.

Product and finder content

We store the content you create in Picklett so the service can work: products (names, descriptions, images or image links, prices, currencies, product URLs, categories, tags, availability, SKUs), finders, questions, answer options, recommendation rules and matching settings, results copy, and design and branding settings such as your accent colour, fonts and any logo you upload.

Please do not put personal information about your own customers into product descriptions, question text or other finder content. Picklett is not designed to hold that kind of content.

Subscription information

We store your current plan, plan status, monthly recommendation allowance, trial start and end dates, and your account-wide usage count for the current period.

Support communications

If you email contact@picklett.com we hold that correspondence so we can answer you and keep a record of the issue.

3. Payment and subscription information

Card payments are not switched on in Picklett yet. Picklett does not currently collect or store card numbers, and no subscription payment has been charged.

The Free plan does not require a card; Growth and Pro trials do. Your plan, allowance and usage are tracked in our own database as described above.

Payments are processed by Stripe. Card details are entered directly with Stripe and are never stored by Picklett; we store only Stripe customer and subscription identifiers, plan, status and billing dates.

4. Usage and device information

Like any website, our hosting infrastructure processes technical request information — including IP address, approximate location derived from it, browser and device type, requested pages and timestamps — in order to serve pages, keep the service available and protect it against abuse. These logs are retained for a limited period by our hosting and platform provider.

We measure how the Picklett application itself is used, on a first-party basis, using our own database rather than a third-party advertising network. We do not use advertising or marketing tracking technologies, and we do not run third-party advertising pixels on our website.

5. Cookies and similar technologies

Picklett uses strictly necessary cookies and browser storage to keep you signed in, protect the service, and remember your cookie choice. Optional first-party analytics can be accepted or rejected using the cookie banner or the Cookie Preferences link in the footer. If accepted, we record page views, clicks on key buttons and in-app actions (such as adding a product, publishing a Finder or copying embed code) together with a random visitor identifier and first-visit campaign source details. This is used only to understand how Picklett is used and which marketing brings in customers; it is visible only to Picklett administrators, is not shared with advertising networks, and is retained for up to 13 months.

Full details, including durations and how to control cookies in your browser, are in the Cookie Policy.

6. Shopper interaction data processed for merchants

When a shopper uses a published or embedded product finder, Picklett records information about the interaction so the merchant can see how their finder performs. By design this is anonymous or pseudonymous interaction data:

• A randomly generated session identifier for the finder run. It is not linked to a name, email address or account.
• Which questions were shown and which answer options were selected, plus any numeric input such as a budget.
• Whether the run reached the results screen, and when.
• Which products were recommended, their position and the deterministic match score and reasons.
• Which recommended products were clicked.
• Referrer information about the page the finder was used on, where the browser provides it.

A standard product finder does not ask shoppers for a name, email address or phone number, and Picklett does not require shoppers to create an account or sign in. If a merchant later enables an optional feature that legitimately requires contact details, that information is collected on the merchant's instructions and for the merchant's purposes.

For shopper interaction data, the merchant decides what to collect and why. Picklett processes it on the merchant's behalf. Merchants remain responsible for their own website, their own customers, their own privacy notice and cookie notice, and any consent or disclosure their applicable laws require.

Shoppers with questions about a specific finder should contact the merchant whose website they used. If you contact us instead, we will normally refer you to that merchant, and we can help them respond.

7. How we use information

• To provide the service: creating accounts, storing your products and finders, generating recommendations, publishing and embedding finders and showing analytics.
• To count completed recommendations against your plan allowance and to apply plan limits, trials and feature availability.
• To secure the service, prevent fraud and abuse, and diagnose faults.
• To communicate with you about your account, including service, security and billing messages, and to answer support requests.
• To improve the product by understanding which features are used.
• To meet legal, accounting and record-keeping obligations, and to resolve disputes or enforce our agreements.

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising or targeted advertising.

8. Legal bases for processing

Where the EU or UK GDPR applies to our own processing of merchant information, we rely on:

• Performance of a contract — to provide the service you signed up for and administer your plan.
• Legitimate interests — to keep the service secure and reliable, prevent abuse, and improve the product, balanced against your rights.
• Consent — for optional analytics cookies, where consent is required. You may withdraw it at any time.
• Legal obligation — for record-keeping, tax and accounting, and responding to lawful requests.

For shopper interaction data collected through a merchant's finder, the merchant is normally the controller and determines the legal basis; Picklett acts as processor or service provider under the Data Processing Addendum.

9. How information is shared

We do not sell personal information. We share information only in these situations:

Service providers and subprocessors

• Lovable Cloud — application hosting, database, file storage and authentication infrastructure. All account, product, finder and analytics data is stored here.
• Google — only where you choose to sign in with Google, and for the web fonts loaded on our website, which involves a request to Google's font servers from your browser.

Picklett uses Stripe to process subscription payments; card details are entered directly with Stripe and never stored by Picklett. Picklett does not currently use a third-party advertising network, third-party product analytics provider or marketing automation platform. If that changes, this list will be updated before the provider begins processing.

Other disclosures

• Merchants — a merchant sees the interaction and analytics data generated by their own finders.
• Legal and safety — where we are required by law, or to protect our rights, users or the security of the service.
• Business transfers — if Picklett is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

10. Data retention

We keep your account information and the content you create for as long as your account is open. If you delete something inside Picklett — a product, a question, a finder — it is removed from the live service, together with the records that depend on it.

When you delete your account, we delete your profile, finders, questions, answers, recommendation rules, design and branding settings, products and the associated session, recommendation, click and analytics records from the live service.

We may retain limited information for longer where it is genuinely necessary for legal obligations, billing and accounting requirements, fraud prevention, security, dispute resolution or enforcing our agreements. Technical infrastructure logs and routine backups expire on their own schedule and are not kept indefinitely.

11. Data security

Picklett is built so that each merchant can only reach their own data. Access is enforced at the database level with row-level security rules keyed to the signed-in account, credentials are handled by our authentication provider rather than stored by us in plain form, traffic is encrypted in transit, and administrative keys are held only on the server and are never included in code that runs in a browser.

A published finder deliberately exposes only what a shopper needs — the finder's questions, answer options, design settings and the products that can be recommended. Draft and unpublished finders are not publicly readable, and analytics records can only be read back by the merchant who owns the finder.

No service can promise perfect security, and we make no claim to hold any security certification. We do not claim SOC 2, ISO 27001, PCI, HIPAA or GDPR certification.

12. International transfers

Picklett is operated with infrastructure that may process and store information in countries other than your own, including the United States. Where information is transferred out of the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with the terms in our Data Processing Addendum.

13. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the product: your details are editable on the Account page, and your content can be edited or deleted at any time.

United States state privacy rights

If a US state privacy law applies to you, you may have rights to know, access, correct, delete and obtain a portable copy of your personal information, and to be free from discrimination for exercising them. Because Picklett does not sell personal information and does not share it for targeted advertising, there is nothing to opt out of in that respect — but you may still submit a request and we will confirm this in writing.

EEA, UK and Switzerland

If the EU or UK GDPR applies, you also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.

Global Privacy Control

Where legally required and technically applicable, we honour opt-out preference signals such as Global Privacy Control. When your browser sends one, optional analytics stays switched off unless you enable it yourself.

To make a request, use the Your Privacy Choices page or email contact@picklett.com. We may need to verify your identity, and we will respond within the period required by applicable law.

14. Children's privacy

Picklett is a business tool and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, email contact@picklett.com and we will delete it.

15. Changes to this policy

We may update this policy as the product changes. When we do, we will change the “Last updated” date at the top of this page, and we will give notice of material changes through the service or by email before they take effect.

16. Contact us

For any privacy question, request or complaint, email contact@picklett.com. Picklett does not publish a physical address or telephone number for privacy contact; email is the correct channel.