Privacy Policy

Account data. Username, email address, and password. Passwords are stored only as salted bcrypt hashes — we never store or see them in plain text.

Profile photo. A photo, if you choose to add one.

Google Sign-In. If you sign in with Google, we receive your email and profile picture from Google to create or link your account. We never see your Google password.

Laptop preferences. Your Needs Wizard answers — budget range, purpose, factor priorities, screen size, portability, and brand preferences.

Background answers.After the Needs Wizard we ask a few more questions: whether you are a student, working, buying for a business or something else; what you study, if you are a student; how much you know about laptops; the laptop you use now; and why you want to change. Every one is optional, you can change or clear them on your profile page, and we use them only to tailor Pico's answers to you.

Conversations with Pico.Your chat messages, Pico's replies, and the laptop shortlists produced in each conversation are stored so conversations can continue where they left off.

Saved laptops. Your saved list is stored with your account.

Service logs.We keep monitoring logs of each Pico turn, including your message and Pico's reply, and a search log with the search text. Deleting a conversation deletes its monitoring logs; the search log is deleted with your account. We also keep counts of AI usage (the model and how much text it processed, never the text itself).

• Personalizing recommendations and Pick Scores to your stated needs, budget, and preferences.
• Powering Pico conversations and remembering their history.
• Sending account emails — verification and password reset. We don't send marketing email.
• Monitoring and improving recommendation and search quality.
• Keeping the service secure and preventing abuse.

Pico is powered by third-party AI models. When you chat, your messages, saved preferences, background answers, and relevant catalog data are sent to AI providers (Google's Gemini and Gemma models) to generate a reply. These providers process the data on our behalf. Please don't include sensitive personal information in chat messages — Pico doesn't need it to recommend a laptop.

We share personal data only with service providers that run PickWise for us, and only what each one needs:

• Database and hosting — our database is hosted on Supabase and our servers run on Render.
• AI providers — Google (Gemini, Gemma) process chat and recommendation requests (see section 3).
• Price search— live market-price lookups query SerpApi (Google Shopping) with the laptop's name only, never your personal data.
• Email delivery — verification and password-reset emails are sent through our email provider.

We do not sell personal data, and we do not share it with advertisers — PickWise has no ads or ad tracking.

• Sign-in token— kept in your browser's local storage so you stay signed in; it expires after 7 days and is deleted when you log out.
• Theme choice — your light/dark mode preference.
• Needs Wizard progress— an unfinished draft of your answers, plus two reminders: whether we have already sent you to the wizard, and whether you closed the reminder banner. They stay in your browser's local storage, not on our server, and the draft is deleted once you finish the wizard.

We don't use advertising or cross-site tracking cookies.

We keep your account data, preferences, and conversation history for as long as your account exists. Service logs are kept only as long as needed for quality monitoring. You can delete your account yourself with the “Delete account” button on your profile page. It asks you to type your username, then deletes your account together with your conversations (messages, replies and shortlists), the monitoring and search logs linked to you, your preferences, background answers, saved laptops and photo.

Two things are kept, with nothing that points to you. AI usage counts stay, with your account removed from them. Search text logged before 10 November 2026 was stored without a link to any account, so we cannot tell which of it was yours and it is not deleted.

• Access and update — view and edit your background answers and laptop preferences anytime on your profile page.
• Remove your photo — delete your profile photo from the profile page at any time.
• Delete your account— use the “Delete account” button on your profile page. It deletes your account and the data linked to it (section 6 lists what is deleted and what is kept).

If you are in Malaysia, you also have rights under the Personal Data Protection Act 2010 (PDPA), including the right to access and correct your personal data.

All traffic to PickWise is encrypted with HTTPS, passwords are bcrypt-hashed, and sessions use short-lived signed tokens. No online service can promise perfect security, but we design for it — for example, we never store plain-text passwords, and Google Sign-In means we never handle your Google credentials at all.

PickWise is not directed at children under 13, and we don't knowingly collect their personal data.

We may update this policy as the service evolves — for example, when new features move data from your browser to your account. We'll change the “Last updated” date above when we do. See also our Terms of Service.

Email admin-pickwise@ngyijie.com to ask what data we hold about you, to ask for a correction, or with any question about privacy. To delete your account, use the “Delete account” button on your profile page (section 6).