Privacy Policy

01 Information we collect

We collect information in three ways: what you give us, what you connect, and what we observe automatically.

• Account & waitlist details — your name, email, and optionally company and role, provided when you join the waitlist or create an account.
• Customer Data — the data sources and datasets you authorize picoask to connect to and analyze.
• Usage & device data — log data, queries run, feature usage, IP address, and browser information collected automatically to operate and secure the Service.

You control what Customer Data you connect and what you enter into queries. Please don’t submit sensitive or special-category personal data (for example health, financial-account, or government-ID information) beyond what your analysis needs; where you do connect such data, you are responsible for having a lawful basis, as described in our Terms.

02 Our role

For Customer Data — the data sources and datasets you connect — we act as a processor and handle it only on your instructions to provide the Service. For account, waitlist, and usage data, we act as the controller, and this Policy describes how we handle it.

03 How we use information

We use information to provide, maintain, and improve the Service; to run analyses and generate results you request; to communicate with you about access, updates, and support; to secure the Service and prevent abuse; and to comply with legal obligations.

We do not sell your personal information, and we do not use your Customer Data to train foundation models without your explicit consent.

04 Legal bases

Where required (for example, under the GDPR), we process personal data on the bases of performing our contract with you, our legitimate interests in operating and improving the Service, your consent, and compliance with legal obligations.

05 Sharing & subprocessors

We share information with vetted service providers (such as cloud hosting, model, and analytics providers) who process it on our behalf under contractual safeguards. We may disclose information if required by law or to protect our rights, and in connection with a merger or acquisition. We do not sell personal data.

06 Cookies & analytics

We and our analytics providers use cookies and similar technologies to operate, secure, and understand use of the Service. Our pages also load fonts from Google Fonts, which may receive your IP address when pages load. You can control or block cookies through your browser settings.

07 Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer retention is required by law. You can request deletion at any time.

08 Security

We use administrative, technical, and physical safeguards — including encryption in transit and at rest and access controls — to protect information. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

09 Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact privacy@picoask.ai.

If you are a California resident, you have additional rights under the CCPA/CPRA — including to know, delete, and correct your personal information and to opt out of its “sale” or “sharing.” We do not sell or share personal information as those terms are defined.

10 International transfers

We may process and store information in the United States and other countries. Where we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses.

11 Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

12 Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email, and the “last updated” date above will reflect the latest revision.