Privacy Policy

1. Information We Collect

Information you provide:

• Phone number (required for orders and account verification)

• Name and email address (for order communications and receipts)

• Delivery address (when you choose delivery)

• Payment details (processed by Paystack; we do not store card numbers)

Information collected automatically:

• Device type, browser, and operating system

• Pages visited and interactions on the Platform

• IP address and approximate location

• Cookies and local storage for cart persistence and session management

2. How We Use Your Information

• To process and track your orders

• To verify your identity via OTP (one-time password)

• To communicate order updates via SMS and email

• To enable Vendors to fulfil and deliver your orders

• To improve the Platform and fix technical issues

• To prevent fraud and protect Platform security

• To send waitlist and promotional updates (with your consent)

3. Third-Party Services

We use the following third-party services to operate the Platform. Each processes limited data as described:

Paystack

Processes your payment card and bank transfer details. We do not store your card numbers. Paystack is licensed by the Central Bank of Nigeria.

Cloudflare

Provides security, DDoS protection, and DNS services. Cloudflare processes your IP address and connection metadata. We also use Cloudflare Turnstile, a bot protection service that collects technical data including your IP address, browser type, and interaction patterns to verify that you are a real person. No personal information you enter on the Platform is shared with Cloudflare through this service.

Termii

Delivers OTP codes and order notification SMS messages to your phone number.

Resend

Delivers order confirmation emails, receipts, and updates to your email address.

Supabase

Stores your account data, order history, and uploaded files. Hosted on AWS infrastructure.

Groq

Powers the AI shopping assistant on vendor storefronts. Your messages to the AI assistant are sent to Groq for processing. The AI does not store conversation history after your session ends.

Google Analytics

Collects anonymised usage data to help us understand how the Platform is used.

Fez Delivery

When you choose delivery, your delivery address and phone number are shared with Fez to fulfil the delivery.

Vercel

Hosts the Platform. Processes your IP address and request metadata.

4. Data Sharing

We do not sell your personal information to third parties.

Your data is shared only with:

• Vendors you place orders with (name, phone, email, delivery address — so they can fulfil your order)

• Third-party services listed above (strictly for the purposes described)

• Law enforcement if required by Nigerian law or court order

5. Data Security

We implement security measures to protect your data, including encrypted connections (HTTPS), server-side access controls, PIN-based account security, and audit logging. However, no system is 100% secure, and we cannot guarantee absolute protection.

6. Your Rights

Under the Nigeria Data Protection Regulation (NDPR), you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data (subject to legal retention requirements)

• Withdraw consent for promotional communications

To exercise these rights, contact us at support@picki.store.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Order history is retained for accounting and dispute resolution purposes. You may request deletion of your data by contacting support.

8. Cookies and Local Storage

The Platform uses:

• Local storage to persist your shopping cart between visits

• Cookies for Google Analytics (usage tracking)

• Service worker cache for faster page loads on return visits

You can clear these at any time through your browser settings.

9. Children

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date above. Continued use of the Platform after changes constitutes acceptance.