Privacy Policy

1. Introduction

Welcome to pick2pay ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment link aggregation service.

By using pick2pay, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access or use our services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, we collect:

• Email address
• Username (for your public profile URL)
• Display name (optional)
• Payment service usernames/handles (Venmo, Zelle, Cash App, PayPal)
• Profile picture (optional)

2.2 Information from Google Sign-In

When you choose to sign in with Google, we receive the following information from your Google account:

• Email address: Used to create and identify your pick2pay account
• Name: Used as your default display name (you can change this)
• Profile picture: Used as your default avatar (you can change or remove this)

We only request the minimum information necessary to create your account. We do not access your Google contacts, calendar, files, or any other Google services.

2.3 Information Collected Automatically

When you access our service, we automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate location
• Usage data (pages visited, features used, time spent on service)
• Referring URLs and exit pages
• QR code scan analytics (aggregate only)

2.4 Information We Do NOT Collect

We want to be clear about what we don't collect:

• Bank account numbers or financial account credentials
• Social Security numbers or government IDs
• Payment transaction details or amounts
• Credit card or debit card information (handled by Stripe)

3. How We Use Your Information

We use the information we collect to:

• Create and manage your pick2pay account
• Generate your personalized payment link and QR code
• Display your enabled payment options to visitors of your profile
• Process subscription payments (via Stripe)
• Send service-related communications and updates
• Provide customer support
• Improve and optimize our service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Public Information

The following information is publicly visible on your profile page:

• Your username and display name
• Your profile picture (if provided)
• Payment service usernames you choose to enable/display

4.2 Third-Party Service Providers

We share information with trusted third parties who assist us in operating our service:

• Google: Authentication via Google Sign-In (OAuth 2.0)
• Supabase: Authentication and database hosting
• Stripe: Payment processing for subscriptions
• Analytics providers: Aggregated usage statistics

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Google API Services User Data Policy

pick2pay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5.1 Limited Use Disclosure

Our use of information received from Google APIs is limited to the following:

• Creating and authenticating your pick2pay account
• Displaying your name and profile picture on your pick2pay profile (with your permission)
• Sending account-related communications to your email address

5.2 What We Do NOT Do With Google Data

We do not and will not:

• Transfer Google user data to third parties unless necessary to provide or improve our service, or as required by law
• Use Google user data for advertising or marketing purposes
• Use Google user data to build user profiles for advertising
• Sell Google user data to data brokers or any third parties
• Use Google user data for purposes unrelated to the core functionality of pick2pay

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication through Supabase Auth
• Regular security assessments and updates
• Access controls and employee training

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or reporting purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time

To exercise any of these rights, please contact us at the email address provided below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use our service
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect some features of our service.

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: