Privacy Policy

At Picalley, we respect your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.

1. Information We Collect

Information you provide:

• Email address or phone number (for account creation and OTP login)
• WhatsApp number (for PDF delivery)
• Photos you upload for rendering
• Payment information (processed by Razorpay — we do not store card details)

Information collected automatically:

• Device type, browser, and operating system
• IP address and approximate location
• Usage data (pages visited, features used)

2. How We Use Your Information

• To process your photo renders and generate PDFs
• To deliver your orders via WhatsApp and/or email
• To authenticate your account via OTP
• To process payments through Razorpay
• To communicate order updates and service notifications
• To improve our service and fix issues

3. Photo Data

Photos you upload are stored on Cloudflare R2 (cloud storage). They are used solely to generate your AI renders. We do not use your photos for training AI models, marketing, or any purpose beyond delivering your order.

Rendered images are stored in your account gallery for your access. You can delete your renders at any time from the gallery page.

4. Data Sharing

We share your data only with:

• Razorpay — for payment processing
• Resend — for transactional emails (order confirmations, PDF delivery)
• Cloudflare — for file storage (R2)
• Supabase — for database hosting

We do not sell your personal information to third parties. We do not share your photos with anyone.

5. Data Retention

• Account data is retained as long as your account is active
• Uploaded photos and renders are retained until you delete them
• Order records are retained for accounting and legal compliance
• OTP codes expire after 10 minutes and are marked as used

6. Your Rights

You have the right to:

• Access your personal data through your account
• Delete your renders and uploads from the gallery
• Request deletion of your account and associated data
• Withdraw consent for marketing communications

To exercise these rights, contact us at support@picalley.com.

7. Minors

Users under 18 may use Picalley with parental or guardian consent. Parents or guardians are responsible for any activity on accounts created by minors.

8. Cookies

We use a single session cookie (picalley_session) to keep you logged in. We do not use tracking cookies or third-party analytics cookies.

9. Security

We use industry-standard security measures including HTTPS encryption, secure cookie handling, and hashed credentials. Payment data is handled entirely by Razorpay and never touches our servers.

10. Changes

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.

11. Contact

For privacy-related questions, contact us at support@picalley.com.