Draft — pending legal review

This document is a working draft for PicPal's pre-launch phase. It will be reviewed by qualified counsel and updated before the marketplace goes live with paid bookings.

Privacy Policy

Last updated: May 2, 2026 · Effective on launch

1. Introduction

This Privacy Policy describes how PicPal ("we", "our", "us") collects, uses, and shares personal information when you use our website, applications, and services (the "Service"). By using PicPal you agree to the practices described here.

2. Information we collect

We collect information you provide directly, information collected automatically, and information from third parties.

Account data: name, email, password, role (traveler or photographer), city.
Profile data (photographers): bio, portfolio images, specialties, pricing, availability, languages.
Booking data (when live): shoot date, location, package, notes, billing details processed by our payment provider.
Communications: messages exchanged through PicPal, support requests, reviews.
Waitlist data: email, role, optional city, source page.
Usage data: IP address, device, browser, pages visited, referrer, approximate location, cookies and similar technologies.

3. How we use information

To provide, maintain, and improve the Service;
To process bookings, payments, and payouts (when the marketplace is live);
To match Travelers with Photographers and to enable messaging;
To verify identity, prevent fraud, and enforce our Terms;
To send transactional and, with your consent where required, marketing communications;
To comply with legal obligations and respond to lawful requests.

4. Legal bases (EEA / UK users)

We process your personal data on the bases of (a) performance of a contract with you, (b) our legitimate interests in operating and improving the Service, (c) your consent where required (for example, marketing emails or non-essential cookies), and (d) compliance with legal obligations.

5. Sharing your information

We share information with:

Other users as needed to complete a booking (e.g. a photographer sees a traveler's name and meeting spot).
Service providers that help us run PicPal — hosting, database, email, analytics, payment processing, customer support — under written confidentiality and data-protection terms.
Authorities when required by law, subpoena, or to protect rights, safety, and the integrity of the Service.
A successor in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell your personal information.

6. Cookies

We use essential cookies for authentication and security, and analytics cookies to understand how the Service is used. You can control non-essential cookies in your browser settings or via our cookie banner where applicable.

7. Data retention

We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Waitlist signups are retained until launch and then migrated into account or marketing systems with your consent where required.

8. International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

9. Your rights

Depending on where you live, you may have the right to:

Access, correct, or delete your personal information;
Object to or restrict certain processing;
Port your data to another service;
Withdraw consent at any time;
Lodge a complaint with your local data protection authority.

To exercise these rights, email hello@picpal.com. We may need to verify your identity before responding.

10. Security

We use industry-standard safeguards including encryption in transit, hashed passwords, and access controls. No system is perfectly secure; please use a strong, unique password and let us know immediately if you suspect unauthorized access.

11. Children

PicPal is not directed to children under 18 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

12. Changes

We may update this Privacy Policy. Material changes will be announced on the Service or by email and will take effect on the date stated.