Privacy Policy

This policy explains what personal data Pictuscode ("we", "us") collects when you use the PickusMail website and Service, why, and the choices you have. We collect as little as we need, never sell personal data, and do not use it for advertising.

1. Two kinds of data

Data about you, as our visitor or customer: your account, payments, support chats and how you use the site. For this data we are the controller.

Data you give us to process: the email lists you verify and the contacts and campaigns in Bulk email. That data belongs to you; we process it only on your instructions to provide the Service, as your processor. You are responsible for having a lawful basis to collect and use it.

2. What we collect

Your account

• Name, email address, company name, and your password (stored only as a one-way hash).
• Your package, credit balance, usage and the settings you choose.
• Team members you add to Bulk email: their name, email and role.

Payments

• What you bought, when, the amount and currency, and the payment reference.
• Card, UPI and bank details are entered with our payment partner and never reach our servers.

Lists you verify

• The email addresses you upload and their results. These are deleted automatically after the retention period shown on each list (30 days unless you choose otherwise).
• Our long-term verification records never contain the address itself, only a keyed one-way hash of it, so they cannot be turned back into addresses.
• To check an address we contact its mail server. We never send an email to the address.

Bulk email

• Contacts you import or add, and the fields you keep on them.
• The emails you send, and what happens to them: delivered, opened, clicked, bounced, complained or unsubscribed.
• Opens and clicks are recorded with a tracking image and redirected links in your emails.

Live chat and contact form

• The name, email and messages you send us, and the page you wrote from.

Website visits

• The pages you view, how long, where you came from, your device and browser type, and which packages you looked at.
• Your IP address is used to estimate your country and region and to stop abuse, and is not stored with your visit.

3. Cookies and browser storage

We use only first-party cookies and storage. There are no advertising or third-party tracking cookies.

• Sign-in (mv_session): keeps you signed in. Required.
• Site analytics (pm_vid for one year, pm_sid for 30 minutes, pm_hit for one minute): anonymous random IDs that let us count visits and tell people from bots.
• Live chat (stored in your browser): remembers your conversation so you can come back to it.
• Preferences (stored in your browser): such as light or dark mode.

You can clear or block cookies in your browser. The site will work, but you will be signed out and your chat will not be remembered.

4. Why we use it

• To provide the Service: run verifications, send your campaigns, keep your account working.
• To take payments and keep the records tax law requires.
• To answer you when you contact us.
• To keep the Service secure and reliable, prevent abuse, and protect sending reputation for all customers.
• To understand how the site is used and improve it.
• To send you emails about your account, such as sign-up confirmation, password reset and receipts. We will only send marketing email if you have agreed to it, and every such email can be unsubscribed from.

5. Who we share it with

We share data only with providers that help us run the Service, under contracts that protect it:

• Amazon Web Services (Amazon SES): sends Bulk email and our account emails.
• Payment partners (such as Cashfree Payments): process payments.
• Our hosting providers: run the servers and databases the Service uses.

We may also disclose data where the law requires it. We do not sell personal data or share it for anyone else's marketing.

6. How long we keep it

• Uploaded lists and their results: until the list's retention period ends, then deleted.
• Account and Bulk email data: while your account is open. When you close it, we delete it within 30 days, except what we must keep by law.
• Payment and invoice records: for as long as tax and accounting law requires.
• Support chats: until you ask us to delete them, or your account is deleted.
• Website visit records: kept to show trends over time, without IP addresses.

7. Security

Data is sent over encrypted connections. Passwords are hashed, verification records store only keyed hashes of addresses, access to customer data inside our team is limited and logged, and admin access requires a separate sign-in.

8. Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR, you can ask us to:

• Tell you what personal data we hold about you and give you a copy.
• Correct data that is wrong or incomplete.
• Delete your data.
• Withdraw consent you have given, such as to marketing email.
• Raise a concern with us, or with your data protection authority.

Email support@pickusmail.com and we will reply within 30 days. If you are a contact in one of our customers' lists, we will pass your request to that customer, since they decide how that data is used, and we will help them act on it.

9. Children

The Service is for businesses and is not meant for anyone under 18.

10. Changes

We will update this page when our practices change, and tell customers by email before significant changes take effect. See also our Terms of Service.