Privacy Policy

Picnyk, Inc. ("Picnyk," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2.1 Information You Provide

• Account Information: Name, email, phone number, password
• Profile Information: Photo, bio, location, preferences
• Vendor Information: Business details, certifications, portfolio, insurance documentation
• Payment Information: Processed securely through Stripe; we do not store full card numbers
• Communications: Messages with Vendors/Customers, support requests
• Event Information: Event details, dates, locations, guest counts

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, search queries
• Location Data: General location based on IP; precise location if permitted
• Cookies: Session and persistent cookies for functionality and analytics

We use collected information to:

• Provide and improve our services
• Process bookings and payments
• Facilitate communication between Customers and Vendors
• Verify Vendor identities and credentials
• Conduct AI-powered quality vetting
• Prevent fraud and ensure platform safety
• Send transactional and marketing communications
• Comply with legal obligations
• Resolve disputes and enforce our Terms

We may share your information with:

4.1 Other Users

Customers can see Vendor profiles, portfolios, and reviews. Vendors can see Customer names, event details, and contact information for confirmed bookings.

4.2 Service Providers

We share information with third parties who help us operate:

• Stripe (payment processing)
• Supabase (database and authentication)
• Vercel (hosting and analytics)
• AI providers (for quality vetting and content analysis)
• Background check services

4.3 Legal Requirements

We may disclose information to comply with laws, respond to legal process, or protect rights and safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the new entity.

We retain your information for as long as necessary to:

• Provide services (while account is active)
• Comply with legal obligations (7 years for financial records)
• Resolve disputes
• Maintain compliance documentation

Deleted accounts are anonymized after 30 days, but booking records are retained for legal compliance.

Depending on your location, you may have rights to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact privacy@picnyk.com.

We implement reasonable security measures including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication with hashed passwords
• Regular security audits
• Access controls and monitoring

No system is 100% secure. You are responsible for maintaining the security of your account credentials.

Picnyk is not intended for users under 18. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it.

California residents have additional rights under the CCPA, including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising rights

Picnyk is based in the United States. By using our services, you consent to the transfer of your information to the US, which may have different data protection laws than your country.

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Your continued use after changes constitutes acceptance.

For privacy-related questions: