Privacy Policy

Account data. Username, email address, and password. Passwords are stored only as salted bcrypt hashes — we never store or see them in plain text.

Optional profile details. Birthday, gender, occupation, and a profile photo, if you choose to add them. These are optional and help Pico put recommendations in context.

Google Sign-In. If you sign in with Google, we receive your email and profile picture from Google to create or link your account. We never see your Google password.

Laptop preferences. Your Needs Wizard answers — budget range, purpose, factor priorities, screen size, portability, and brand preferences — plus a tech-savviness level that tunes how Pico explains things.

Conversations with Pico.Your chat messages, Pico's replies, and the laptop shortlists produced in each conversation are stored so conversations can continue where they left off.

Service logs. We log technical details of each recommendation request (for example, whether a search found confident results) to monitor and improve search quality.

• Personalizing recommendations and PickScores to your stated needs, budget, and preferences.
• Powering Pico conversations and remembering their history.
• Sending account emails — verification and password reset. We don't send marketing email.
• Monitoring and improving recommendation and search quality.
• Keeping the service secure and preventing abuse.

Pico is powered by third-party AI models. When you chat, your messages, saved preferences, and relevant catalog data are sent to AI providers (Google's Gemini models and model providers via OpenRouter) to generate a reply. These providers process the data on our behalf. Please don't include sensitive personal information in chat messages — Pico doesn't need it to recommend a laptop.

We share personal data only with service providers that run PickWise for us, and only what each one needs:

• Database and hosting — our database is hosted on Supabase and our servers run on Render.
• AI providers — Google (Gemini) and OpenRouter process chat and recommendation requests (see section 3).
• Price search— live market-price lookups query Serper.dev with the laptop's name only, never your personal data.
• Email delivery — verification and password-reset emails are sent through our email provider.

We do not sell personal data, and we do not share it with advertisers — PickWise has no ads or ad tracking.

• Sign-in token— kept in your browser's local storage so you stay signed in; it expires after 7 days and is deleted when you log out.
• Theme choice — your light/dark mode preference.
• Saved laptops — your saved list currently lives only in your browser, not on our servers.

We don't use advertising or cross-site tracking cookies.

We keep your account data, preferences, and conversation history for as long as your account exists. Service logs are kept only as long as needed for quality monitoring. When your account is deleted, the personal data linked to it is deleted too.

• Access and update — view and edit your profile details and laptop preferences anytime on your profile page.
• Remove your photo — delete your profile photo from the profile page at any time.
• Delete your account — you may request deletion of your account and associated data.

If you are in Malaysia, you also have rights under the Personal Data Protection Act 2010 (PDPA), including the right to access and correct your personal data.

All traffic to PickWise is encrypted with HTTPS, passwords are bcrypt-hashed, and sessions use short-lived signed tokens. No online service can promise perfect security, but we design for it — for example, we never store plain-text passwords, and Google Sign-In means we never handle your Google credentials at all.

PickWise is not directed at children under 13, and we don't knowingly collect their personal data.

We may update this policy as the service evolves — for example, when new features move data from your browser to your account. We'll change the “Last updated” date above when we do. See also our Terms of Service.