Privacy notice
Last updated: 8 October 2026
This notice explains what Picket does with your information if you use Picket (including our trial), join our early list, or open a receipt a seller has shown you.
Who we are
Picket is run by Picket, a sole trader in the UK. For data protection law we are the “controller” of the information described here.
- Email: hello@picket.live
We don’t have a data protection officer (we’re too small to need one). Email us about anything in this notice.
If you join the early list
What we keep: your email address, your answer to “What do you sell?” if you gave one, and the date you joined.
Why: to send you news about Picket’s early access, no more than a couple of times a month, and to invite you to try it.
Our lawful basis: your consent, which you give by joining.
How long: until you ask us to stop. Reply “stop” to any email, or email us, and we’ll delete you from the list.
To leave: reply “stop” to any email, or email us. We’ll take you off the list straight away.
If you use Picket
Your account
- During the trial, accounts are by invitation only. We send an invitation to the email address you gave us, through our sign-in provider Clerk, and you choose your own password. We never see or know your password.
- Your email address, the password or sign-in method you chose, and your sign-in sessions. These are handled by our sign-in provider, Clerk (see “Who else handles your information”).
- Your settings: business name, emoji or logo (if you add them), your card fee, and similar choices.
What you put into Picket
- Your stock, purchases, costs, prices, sales, returns, expenses, events, to-do lists, tag designs and notes.
- Photos and logos you upload. We remove location data from photos when you upload them.
- Spreadsheets you import: we save the rows as items. We don’t keep the file itself.
- Feedback you send us from inside Picket, with the page you were on.
Information about other people in your records. Your records can include other people’s details, such as the username of someone you bought from, or a name in a note. Only add what you need. We use it only to run Picket for you.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| What we doRun your account and Picket's features (including the trial) | Lawful basisContract: it’s needed to provide the service you asked for |
| What we doKeep Picket secure and stop abuse (for example, limiting repeated sign-ups) | Lawful basisLegitimate interests: keeping the service and everyone’s data safe |
| What we doRead your feedback, help when you ask, and fix problems | Lawful basisLegitimate interests: making Picket work properly for you |
We only look inside your account to fix a problem, or when you ask us to help.
How long we keep it. We keep as little as we can:
| What | How long |
|---|---|
| WhatYour stock, sales, expenses, events and notes | How longWhile you use Picket. These are your business records (you may need them for tax), so we never delete them on a timer while your account is in use |
| WhatPhotos of your items | How longKept while you use Picket. If you delete an item, its photos go with it |
| WhatReceipts you've shown customers | How longThe link stops working 12 months after the sale. The receipt record stays in the seller's account until the account is deleted |
| WhatInbox messages | How longKept until you dismiss them |
| WhatFeedback you send us | How longWe keep it until we delete it. Ask us and we'll remove it |
| WhatYour account and sign-in | How longUntil you delete your account |
Deleting your account. Email us and we’ll delete your account, everything in it and your sign-in within 30 days, usually much sooner. We’ll remind you to download your records first. Our backups are kept for up to 14 days, then deleted.
- If you stop using Picket, your records stay until you ask us to delete them.
- If the trial ends, we’ll tell you before it ends so you can download your records.
You can download your stock and expenses as a spreadsheet (CSV) at any time from Settings › Your data.
If you opened a receipt a seller showed you
A Picket receipt (a link starting https://app.picket.live/r/) shows what the seller sold you: their shop name, the date, the items and prices, and how you paid. It holds nothing about you: no name, email or card details. We provide the page for the seller.
When you open it, your phone sends its internet (IP) address. We use it briefly, in memory only, to stop abuse, and our hosting provider keeps it in its server logs for 7 days. We don’t use tracking or advertising cookies on the receipt page. The link stops working 12 months after the sale. For questions about the purchase itself, ask the seller.
Technical information
- IP addresses: used for a short time (up to an hour, not saved to our database) to limit repeated requests, and kept in our hosting provider’s server logs for 7 days.
- Error logs: if something goes wrong, our logs may record your account’s ID, to help us fix it.
- Cookies: we only use cookies needed to sign you in and make Picket work (set by our sign-in provider Clerk, and by Picket itself, for example to remember today’s selling event). Receipt pages set none. Because they’re strictly necessary, we don’t ask for consent, but you should know they’re there: some keep you signed in between visits. Your browser also remembers a couple of small preferences in Picket, such as tips you’ve closed. We don’t use analytics, advertising or tracking cookies.
Who else handles your information
We don’t sell your information, show adverts, or use your data to train AI. A few companies run parts of Picket for us and only use your information to do that:
| Who | What for | Where |
|---|---|---|
| WhoClerk, Inc. | What forSign-in, account security, and sending your trial invitation email | WhereUSA. Protected by the UK Extension to the EU-US Data Privacy Framework (the UK-US "data bridge") |
| WhoRailway | What forRuns Picket's servers, database and photo storage | WhereEU West (Amsterdam) |
| WhoTelegram | What forOnly if you connect the Picket Telegram bot: what you send it passes through Telegram. Also carries our own error alerts, which contain no personal data | WhereTelegram's servers |
| Who123 Reg | What forOur email inbox, for messages to and from you | WhereSee 123 Reg's own privacy notice |
We would only share information otherwise if the law required it.
Your rights
You can ask us to:
- give you a copy of your information;
- correct it;
- delete it;
- limit or object to how we use it;
- give you your information in a format you can take elsewhere;
- and, for the early list, withdraw your consent at any time (just reply “stop”).
Email hello@picket.live. It costs nothing, and we’ll reply within one month. We don’t make automated decisions about you.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first at hello@picket.live. We’ll acknowledge your complaint within 30 days and tell you what we’ve done about it.
You can also complain to the UK regulator, the Information Commission (ICO): ico.org.uk/make-a-complaint.
Changes
If we change this notice in a way that matters, we’ll tell Picket users by email or in the app before it applies. The date at the top shows the latest version.