Privacy Policy

• Google-backed account identifiers, name, email, image, and session data.
• Submission text, website details, ownership, status, Logo, screenshots, and reports.
• Checkout email, provider identifiers, amount, currency, tax, payment, refund, dispute, and ledger facts. Pikkai does not receive full card numbers.
• Security, moderation, consent, diagnostic, device, browser, approximate location, referral, and usage events where the relevant provider supports them.
• Support messages and evidence supplied for privacy, billing, policy, or rights requests.

Pikkai processes data to provide accounts, Submissions, publication, payment, refunds, moderation, abuse prevention, support, security, analytics, legal compliance, and dispute handling. The applicable bases are performance of a contract, legitimate interests in operating and securing the directory, legal obligations, and consent for optional analytics storage where required. Consent can be withdrawn without affecting earlier lawful processing.

Neon provides authentication and Postgres. Vercel provides hosting, Workflows, logs, Blob storage, and AI Gateway. AI Gateway routes submitted text and media to the selected OpenAI model provider for implemented safety classification. Stripe and Waffo process Checkout, payment, refund, and dispute facts. Google Analytics and Microsoft Clarity provide measurement. Cloudflare Turnstile checks abuse signals for public Like and signed-in Product Report actions. These providers may process data across borders under their own infrastructure and legal safeguards.

Submission text and media may be processed for moderation. Pikkai requests AI Gateway routes that do not train on prompt data, does not sell personal data, and does not train models on Submissions.

Pending or denied optional analytics consent keeps optional browser storage disabled. Provider-supported limited cookieless measurement may still send constrained requests or aggregate signals. Pikkai does not describe this mode as zero-request measurement. On Production, use Privacy choices in the global footer to revisit or change the stored choice at any time.

A verified Account Deletion request immediately disables application access. Pikkai deletes or anonymizes personal account data, unsubmitted Drafts, and private media within 30 calendar days. The same email may name Published products for immediate Unpublish. Unpublished content and media stay privately recoverable for 90 days and are then removed unless a legal, security, or dispute hold applies.

Payment, refund, chargeback, and ledger facts are retained for seven years after the transaction. Closed report, security, and Operator audit facts are retained for two years. A documented legal or dispute hold may require longer retention. Provider records may follow the provider’s mandatory fraud, tax, and legal retention duties.

Send a verified request to access, correct, delete, export, restrict, or object to processing, or to withdraw consent. Pikkai responds within 30 calendar days, subject to identity verification, applicable extensions, legal exceptions, and records that must be retained. Complaints may also be made to the competent privacy authority.