Privacy Policy

PickSkill ("we", "us") operates pickskill.ai, the PickSkill desktop app and related services, and is responsible for the personal information described here. You can reach us through the feedback page.

• Account information: your email address and, if you sign in with Google, your name and profile picture.
• Content you provide: questions and messages you send, conversation history, portfolios and holdings you create, files and screenshots you attach to feedback, and the documents PickSkill generates for you.
• Billing information: your plan, subscription status and payment history. Card details are entered on and stored by Stripe; we never see or store full card numbers.
• Usage and device information: pages viewed, features used, approximate location derived from IP address, browser and device type, and referral source (for example, which link brought you here).
• Technical logs: IP address, user agent and request metadata kept by our hosting and infrastructure providers for security and reliability.

• To provide the service: answer your questions, run analyses, maintain your portfolios and generate files.
• To manage your account and subscription, including sign-in codes and billing.
• To keep PickSkill secure: detect abuse, enforce usage limits and prevent fraud.
• To improve the product, using aggregated usage statistics.
• To communicate with you about the service, such as security notices and important changes.

We do not sell or rent your personal information, we do not use it for third-party advertising, and we do not use your content to train AI models.

To answer a request, PickSkill sends the relevant parts of your conversation to the language-model provider that serves it, currently OpenAI models accessed through the MemoryLake gateway, and may send search terms or ticker symbols to data and search providers. These providers process the data to return a result to us under their own terms and privacy policies. Do not include sensitive personal information (such as government ID numbers or account passwords) in your messages.

We share information only with service providers that help us run PickSkill, only to the extent they need it:

• Vercel: hosting and content delivery.
• Supabase: database for accounts, conversations and portfolios.
• Cloudflare R2: storage for generated files and feedback attachments.
• Stripe: payment processing and subscription billing.
• Google: Google sign-in and Google Analytics.
• MemoryLake and OpenAI: language-model processing.
• Valyu, Yahoo Finance, Exa and Tavily: market data and web search (these receive queries such as tickers or search terms, not your account details).
• Our email delivery provider: sending sign-in codes and service emails.

We may also disclose information if required by law, to protect the rights and safety of PickSkill or its users, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply.

• Essential cookies keep you signed in (the session cookie) and remember your language choice.
• Analytics cookies from Google Analytics help us understand how the site is used. You can block them in your browser or with Google's opt-out add-on without affecting core features.
• Local storage in your browser remembers preferences such as the up/down colour convention, dismissed hints and your active portfolio. It never leaves your device.

• Account information, conversations and portfolios: for as long as your account is active, or until you delete them.
• Download links for generated files expire after 7 days.
• Background job records: deleted about 24 hours after the job finishes.
• Billing records: as long as required for tax and accounting obligations.
• When you ask us to delete your account, we delete or anonymise your personal information within 30 days, except where we must keep it to meet legal obligations.

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, submit a request through the feedback page while signed in to your account. We will respond within the time required by applicable law, and you may also lodge a complaint with your local data-protection authority.

PickSkill's servers and primary database are located in the United States. If you use PickSkill from another country, your information will be transferred to and processed in the United States and other countries where our providers operate, with safeguards required by applicable law.

We use encryption in transit (HTTPS), access controls, and providers with established security programmes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

PickSkill is intended for adults and is not directed at anyone under 18. We do not knowingly collect information from children; if you believe a child has provided us information, tell us through the feedback page and we will delete it.

We may update this policy as the product evolves. We will change the "last updated" date above and, for material changes, notify signed-in users in the product or by email.

Submit a privacy request through the feedback page while signed in. We reply to the email address on your account.