Privacy
Privacy policy
Updated 16 October 2026
Who this covers
Pico (picofinds.com) is an AI shopping assistant that merchants connect to their own catalog. This policy covers the public website, the merchant dashboard, and the assistant shown to shoppers on a connected store.
Account and store data
When you create an account we store your name, email, a hashed password, organization name, billing country, and role. Connecting a store stores the store URL, platform, and the credentials needed to sync the catalog. Those credentials are encrypted. Billing records include the plan, subscription status, and a payment reference from Paddle or Paymob. Pico does not store full card numbers.
Shopper conversations
The storefront assistant stores the shopper’s message, Pico’s reply, the products that were shown or selected, the locale, and a session id. A conversation is used to answer that shopper in that store. It is not sold, and it is not used to train a public model. Merchants can see analytics for their own store.
Cookies
The pico_locale cookie remembers the language you chose for one year so the next page stays in that language. The dashboard uses a session cookie to keep you signed in and a CSRF cookie to protect account changes. You can clear these in your browser. The site will ask for a language again, and you will need to sign in again.
How we use information
We use this information to run the assistant, sync catalogs, show usage, bill the subscription, keep accounts secure, and fix errors. We do not sell personal information.
Who processes it
The website is hosted separately from the API. Payments are processed by Paddle (USD) or Paymob (EGP). Replies are generated by an AI model provider using the shopper’s message and products from the connected catalog. Error monitoring may receive technical details of a failed request, not your password or store secret. These providers process data only to deliver that service.
How long we keep it
Account and billing records stay while the organization is active, and for as long as tax or dispute rules require after it closes. Widget sessions expire. You can ask us to delete a merchant account.
Your choices
Depending on where you live, you can ask to access, correct, or delete personal information, or object to certain uses. Email privacy@picofinds.com from the address on the account. We will respond to a clear request.