隐私政策

At PicklyOne, we are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy ("Policy") explains our data practices in connection with the PicklyOne platform, website, applications, APIs, and all related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please do not use our Services.

This Policy should be read together with our Terms of Service and Usage Policy.

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: Name, email address, username, password, and any other information you provide during registration.
• Payment Information: Billing details such as payment method, billing address, and transaction history. Payment processing is handled by our third-party payment processor(s); we do not store your full credit card number on our servers.
• User Content: Inputs (prompts, queries, uploaded files, and data) you submit to our Services, and the outputs generated by our AI in response. Together, these are referred to as "User Content."
• Communications: Content of messages when you contact us for support, submit feedback, or report issues.
• Profile and Preferences: Display name, avatar, language preferences, and notification settings.

1.2 Information We Collect Automatically

• Device and Technical Information: IP address, browser type and version, operating system, device type, device identifiers, screen resolution, and language settings.
• Usage Information: Features used, pages visited, actions taken, timestamps, session duration, frequency of use, and performance data (e.g., error logs, load times).
• Location Information: Approximate geographic location based on your IP address. If you choose to share your precise location, we will process it to fulfill your request.
• Log Data: Server logs including request details, referring URL, and other standard log data.
• Cookies and Similar Technologies: See Section 10 for details.

1.3 Information from Third-Party Sources

• Authentication Providers: If you sign in using a third-party service (e.g., Google, MetaMask), we receive certain profile information from that provider in accordance with their privacy practices.
• Analytics Partners: We may receive aggregated or de-identified information from analytics providers.
• Business Partners and Integrations: If you connect third-party applications to PicklyOne, we may receive data from those services as necessary to enable the integration.

2. How We Use Your Information

2.1 Providing and Operating the Services

• Create and manage your account
• Process your Inputs and deliver Outputs through our AI platform
• Process payments and manage subscriptions
• Provide customer support and respond to your inquiries
• Enable features, integrations, and functionalities you request

2.2 Improving and Developing the Services

• Analyze usage patterns and trends to improve performance, reliability, and user experience
• Conduct research and development, including testing new features

2.3 Safety, Security, and Compliance

• Detect, prevent, and address fraud, abuse, security incidents, and technical issues
• Enforce our Terms of Service, Usage Policy, and other applicable policies
• Monitor for and prevent harmful or prohibited uses of our Services
• Comply with applicable legal obligations and government requests

2.4 Communications and Personalization

• Send service-related notices, updates, security alerts, and administrative messages
• Send marketing communications where permitted and subject to your preferences
• Tailor your experience and provide relevant content and suggestions

2.5 Aggregated and De-Identified Data

We may use aggregated or de-identified data that can no longer reasonably identify you for any lawful business purpose, including analytics, benchmarking, research, and reporting.

3. AI Processing and Third-Party Model Providers

3.1 We Do Not Train AI Models

PicklyOne is an API platform that routes your requests to third-party AI model providers. PicklyOne does not develop or train its own AI models, and we do not use your User Content (Inputs or Outputs) to train any AI model.

3.2 Processing by Third-Party Model Providers

To generate a response, the Inputs you submit are transmitted to one or more third-party AI model providers and gateway partners ("Model Providers"), who process them solely to return a result. Model Providers operate under their own terms and privacy policies, which we encourage you to review; their handling of data — including any retention or model-training practices on their side — is governed by those terms and is outside PicklyOne's control. A current list of Model Providers is available on request at privacy@picklyone.com.

3.3 What PicklyOne Stores

Text conversations (chat, message, and completion requests) are processed in transit and are not persisted by PicklyOne after the response is delivered. For image and video generation, we store the generation prompt and the generated media for a limited period so the result can be shown in your history; these are deleted on the schedule described in Section 5. Deleting your account removes this content as described in Section 5.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, such as hosting, data storage, payment processing, analytics, customer support, and email delivery. These providers are contractually obligated to use your information only as directed by us and in a manner consistent with this Policy.

4.2 Affiliates

We may share your information with our corporate affiliates and subsidiaries for the purposes described in this Policy.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.4 Legal Compliance and Protection

We may disclose your information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Enforce our Terms of Service, Usage Policy, or other agreements
• Detect, prevent, or address fraud, security issues, or technical problems
• Protect the rights, property, or safety of PicklyOne, our users, or the public

4.5 With Your Consent

We may share your information with third parties when you have provided your explicit consent to do so.

4.6 Aggregated or De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you with third parties for research, analytics, benchmarking, or other lawful purposes.

5. Data Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Policy, and in compliance with our legal obligations.

We may anonymize or de-identify your personal data for research or statistical purposes, in which case we may retain this information indefinitely. In all cases, we may retain information as required by law, to resolve disputes, or to enforce our policies.

6. Data Storage and Security

We take the security of your information seriously and implement commercially reasonable technical and organizational measures to protect your data:

• Encryption: Data is encrypted both in transit (TLS/SSL) and at rest.
• Access Controls: Access to personal data is restricted on a least-privilege basis. By default, PicklyOne employees cannot access your User Content unless required for specific, limited purposes (e.g., investigating policy violations or responding to your explicit support request).
• Authentication Security: HTTP-only cookies for authentication tokens and secure password hashing.
• Infrastructure Security: Industry-standard cloud infrastructure with security certifications, regular vulnerability assessments, and penetration testing.
• Employee Training: All employees receive regular training on security and privacy best practices.
• Incident Response: We maintain an incident response plan and will notify affected users and relevant authorities of security breaches in accordance with applicable law.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. International Data Transfers

PicklyOne operates globally and may process your personal data in countries other than the one in which you reside. When we transfer personal data outside of the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs): We rely on the European Commission's Standard Contractual Clauses for transfers to countries that have not received an adequacy decision.
• Adequacy Decisions: Where applicable, we transfer data to countries recognized as providing an adequate level of data protection.
• Additional Safeguards: We implement supplementary technical and organizational measures as necessary.

8. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information:

• Access and Portability: Request access to your personal information and receive a copy in a structured, machine-readable format.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information. You can delete individual image or video generations at any time, or delete your account, after which your personal data is erased as described in Section 5.
• Restriction and Objection: Request restriction of processing or object to processing based on legitimate interests.
• Withdrawal of Consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies, or cross-border data transfer), withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
• Opt-Out of Marketing: Unsubscribe from marketing communications via the "unsubscribe" link in any marketing email or by adjusting your notification settings.
• Do Not Sell or Share: We do not sell your personal information. If applicable laws grant you the right to opt out of "sale" or "sharing," you may exercise that right by contacting us.

To exercise any of these rights, please contact us at privacy@picklyone.com or use the controls available in your Account settings. We will respond within the timeframe required by applicable law (typically 30 days). We will not discriminate against you for exercising any of your privacy rights.

9. Third-Party Services

Our Service may integrate with third-party authentication providers (e.g., Google, MetaMask), payment processors, analytics tools, and cloud infrastructure providers. Their use is governed by their respective privacy policies, and we encourage you to review them.

If you connect your PicklyOne account to a third-party application (e.g., via OAuth or API integrations), please be aware that the third party may collect and process data in accordance with their own privacy policy. We are not responsible for the privacy practices of third-party services.

10. Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to operate, secure, and improve our Services.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Services.

11. Children's Privacy

Our Services are not intended for, and we do not knowingly collect personal information from, individuals under the age of 18 (or the applicable age of majority in your jurisdiction). If we learn that we have collected personal information from a child without appropriate parental or guardian consent, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us at privacy@picklyone.com.

12. Legal Bases for Processing (EEA/UK/Switzerland)

If you are located in the EEA, UK, or Switzerland, we process your personal data on the following legal bases:

13. Supplemental Regional Disclosures

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). These include the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. We do not "sell" personal information as defined by the CCPA. To exercise your rights, please contact privacy@picklyone.com.

13.2 European Economic Area, UK, and Switzerland

Please see Section 12 for legal bases. You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

13.3 Brazil (LGPD)

If you are a resident of Brazil, you have rights under the Lei Geral de Proteção de Dados ("LGPD"), including the right to access, correct, delete, and port your data, and to object to processing. For international data transfers, we rely on Standard Contractual Clauses or other appropriate safeguards.

13.4 China (PIPL)

If you are located in the People's Republic of China, we process your personal information in accordance with the Personal Information Protection Law ("PIPL"). You have the right to access, correct, copy, and delete your personal information, to withdraw consent, and to obtain an explanation of our processing rules. We process your personal information on the basis of your consent or as necessary to provide the Services you request. To deliver AI features — and where we use cloud infrastructure or AI Model Providers located outside China — your personal information, including the Inputs you submit, may be transferred to and processed outside China; where required, such transfers are made on the basis of your separate consent and an appropriate cross-border transfer mechanism. To exercise your rights or ask about cross-border processing, contact privacy@picklyone.com.

14. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this Policy and provide notice through the Services, via email, or through a prominent announcement on our website. Where required by law, we will obtain your consent before implementing material changes.

Your continued use of the Services after the updated Policy takes effect constitutes your acceptance of the changes. Previous versions will be archived and made available upon request.

15. Contact Information

For privacy-related inquiries, please contact: