Privacy Policy

picc is a product operated by SNIC, LLC ("we," "us," or "our") at piccshop.com. picc helps you turn your purchase history into a shoppable storefront and discover products that people you trust actually buy.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. Please read it carefully. By using picc, you agree to the practices described here.

If you have questions, contact us at support@piccshop.com.

2a. Information You Provide Directly

• Account information — your name, email address, and the handle (URL) you choose for your storefront when you create an account.
• Profile information — your display name and any other information you add to your profile.
• Feedback — ratings and comments you submit about the products we find in your email, or about your experience using picc.

2b. Information We Collect from Gmail

When you connect your Gmail account, you grant picc permission to read your inbox. We use this access only to find and read order confirmation emails — emails from retailers confirming a purchase you made.

Specifically, we collect:

• The merchant or retailer name
• The items you ordered (product names, descriptions, images, prices)
• Order dates and order numbers
• Shipping and delivery status information related to those orders
• Return and refund information related to those orders

We do not read, store, or process any other emails — personal messages, newsletters, financial statements, medical communications, or anything unrelated to purchase confirmations. We do not store the full text or HTML of your emails beyond what is necessary to extract the purchase information above.

2c. Information We Collect Automatically

When you use picc, we collect certain technical information:

• Usage data — pages you visit, features you use, and actions you take on the platform
• Device and browser information — browser type, operating system, and device identifiers
• Log data — IP addresses, access times, and referring URLs
• Error and performance data — collected via Sentry to help us identify and fix technical issues
• Cookies and similar technologies — used to keep you logged in and understand how you use the service (see Section 7)

2d. Information From Third Parties

We use Google OAuth to authenticate your account and connect your Gmail. Google provides us with your name and email address as part of that process. We do not receive your Google password.

We use the information we collect to:

• Build and maintain your storefront — display the products you've purchased, organized the way you want them, with appropriate privacy controls
• Operate the product feed — show users products purchased by people in their network (subject to your privacy settings)
• Improve our email parsing — use your feedback (and, in aggregate, parsing outcomes) to make our order-detection more accurate across merchants
• Run our recommendation engine — match products to users based on purchase history and network connections
• Communicate with you — send transactional messages (account confirmation, scan completion, return detection), and occasional product updates if you opt in
• Monitor errors and performance — use aggregated technical data to diagnose issues and improve reliability
• Ensure security and prevent abuse — detect fraud, unauthorized access, and violations of our Terms of Service
• Fulfill legal obligations — comply with applicable laws and respond to lawful requests

We do not sell your personal information to third parties.

Limitations on use of Google user data: Information obtained from your Gmail account is used solely to provide and improve picc's features for you. We do not use Gmail data for advertising, do not allow humans to read your emails except as necessary to provide the service or as required by law, and do not use Gmail data for any purpose not described in this Privacy Policy. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Your purchase data is private by default. You control what others can see.

Your Privacy Controls

Every item picc imports from your email is assigned a privacy level that you can change at any time:

• Public — visible on your storefront and eligible to appear in the feeds of users in your network
• Private — stored in your account but not visible to anyone else
• Deleted — removed from your storefront (but see Section 5 on data retention)

You can adjust the privacy level of any item individually, or set a default for all future imports. Certain categories of items (such as items we detect as returned) may be set to private automatically, with the option for you to change them.

What Others Can See

When an item is set to Public:

• Your storefront visitors can see the product name, brand, image, and a link to buy it
• Other picc users may see this item in their home feed or discovery surfaces, attributed to your profile
• The specific price you paid is never shown publicly; only publicly available list prices may be displayed
• Your size or other personal variant information is never shown publicly

Social Proof

When multiple picc users have purchased the same product and set it to Public, we may show that product with an indication that others in a user's network have bought it. This may display your name to people who are also picc users. You can prevent this by setting any item to Private.

Service Providers

We share data with third-party service providers who help us operate picc, including:

• Supabase — database and authentication infrastructure
• Vercel — hosting and application delivery
• Anthropic — AI services used to parse email content and extract product information
• Google — Gmail API access and authentication (governed by Google's own privacy policies)
• Sentry — error monitoring and performance tracking

These providers are contractually required to use your data only to perform services for us and are not permitted to use it for their own purposes. We will update this list as we add new service providers; please check back periodically.

Business Transfers

If picc is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of picc, our users, or the public.

We retain your data as long as your account is active or as needed to provide you with the service.

• Purchase data — retained for the life of your account and deleted when you delete your account or remove specific items
• Gmail access — we retain only the extracted purchase information, not the raw email content. We do not retain email bodies or message text beyond the time needed to perform extraction
• Deleted items — items you mark as "deleted" are soft-deleted (not immediately purged) to allow for recovery; they are removed from all public-facing surfaces immediately
• Account deletion — when you delete your account, we delete your personal information and purchase data within 60 days. Some anonymized, aggregated information (not linked to you) may be retained for product analytics

You have the following rights with respect to your data:

• Access — request a copy of the personal information we hold about you
• Correction — update or correct inaccurate information in your account settings
• Deletion — request deletion of your account and associated data. Contact us at support@piccshop.com or use the account deletion option in Settings
• Disconnect Gmail — revoke picc's access to your Gmail at any time through your Google account settings (myaccount.google.com → Security → Third-party apps). Revoking access prevents future scanning but does not delete data already imported
• Privacy controls — adjust the visibility of any item on your storefront at any time
• Opt out of communications — unsubscribe from marketing emails at any time using the link in any email we send

If you are located in the European Economic Area, the United Kingdom, or California, you may have additional rights under applicable law (see Section 9).

We use cookies and similar technologies to:

• Keep you logged into your account
• Remember your preferences
• Understand how you navigate the site

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of picc, including staying logged in.

We take reasonable measures to protect your information, including:

• Encrypted connections (HTTPS) for all data in transit
• Encrypted storage for sensitive data at rest
• Access controls limiting which systems can access personal data
• OAuth-based authentication (we never store your Google password)

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@piccshop.com.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used and shared
• Delete personal information we have collected from you (subject to certain exceptions)
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@piccshop.com.

EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, our legal bases for processing your data include:

• Consent — for Gmail access (you may withdraw consent at any time by disconnecting Gmail)
• Contract — for operating your account and storefront
• Legitimate interests — for security, fraud prevention, and service improvement

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You also have the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact us at support@piccshop.com.

picc is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, contact us at support@piccshop.com.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a prominent notice in the app before the change takes effect. Your continued use of picc after a change takes effect constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or your data, contact us:

SNIC, LLC (operating as picc)
Email: support@piccshop.com
Mailing address: 8735 Dunwoody Place Ste N, Atlanta, GA 30350 US