How Picrowd handles your data

What we store

Picrowd stores the data you add to your workspace: records, custom fields, notes, files, comments, project structure, collaboration settings, shared links, and account details.

Files you upload are stored in Cloudflare R2. Authentication data is stored for any sign-in method you use: Google, GitHub, Apple, or magic links. We do not have access to your third-party account passwords.

How we use your data

Your data is used exclusively to operate the product you signed up for: running your workspace, keeping records and notes in sync between collaborators, generating shared links, sending notifications you have configured, and providing exports and API access.

• Running the workspace and syncing data between collaborators
• Supporting sharing, collaboration, reminders, and notifications you turn on
• Providing CSV and JSON exports, API access, and billing
• We do not sell, rent, or share your workspace data with third parties for their own purposes

Third-party services we rely on

To run the product, Picrowd uses a small set of infrastructure services. Your workspace data is stored in SQLite on Railway with persistent volumes. Uploaded files are stored in Cloudflare R2. Emails are sent through Resend. Authentication can involve Google, GitHub, or Apple depending on how you sign in.

Plugins like Drive, Dropbox, and Box access external services only when you explicitly connect them and grant permission. They operate under the access you provide.

Google user data (Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets)

Picrowd’s AI assistant can connect to Google services — Gmail, Google Calendar, Google Drive, Google Docs, and Google Sheets — but only after you explicitly connect each tool through Google’s OAuth consent screen. Nothing is accessed until you connect a tool yourself, and each tool receives only the permissions listed on that consent screen. You choose which tools to connect, and read and write access can be toggled per tool.

Google user data is accessed solely to provide the specific, user-facing features you invoke: searching or reading email to answer your request, drafting or sending messages you approve, managing calendar events you ask for, and creating, reading, or editing files and documents on your instruction. Tool results appear in your AI session history so you can review exactly what the assistant did; every tool call is also recorded in an audit log you can inspect. Google content is not copied into your workspace records unless you explicitly save it there.

When a request you make requires it, the minimum relevant Google content (for example, the messages matching your search) is processed by our AI model provider strictly to generate your response. It is not used by Picrowd or shared with any provider to build advertising profiles or to train models.

Picrowd’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

• We do not use Google user data — including any data obtained through Google Workspace APIs — to develop, improve, or train generalized artificial intelligence or machine learning models.
• No humans at Picrowd read your Google data, except with your explicit permission for support, where required for security investigations, or where the law requires it.
• We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the feature you invoked or to comply with applicable law.
• We store only the OAuth tokens and the account label/email needed to show which account is connected. Your emails, files, and calendar contents are fetched on demand for the request you make.
• Disconnecting a tool in Picrowd AI immediately disables the connection and deletes its stored credentials. You can also revoke Picrowd’s access at any time at https://myaccount.google.com/permissions.
• To request deletion of any retained data connected to your account, email hello@picrowd.com — we honor deletion requests for Google user data without undue delay.

AI features and your data

When you use Picrowd AI, the content needed to fulfill your request (your message, relevant workspace records, and — if you invoked a connected tool — the minimum relevant tool results) is processed by our AI model provider to generate the response. AI actions that change your data require your approval, are logged, and are reversible.

We do not use your workspace content or Google user data to train our own or third-party generalized AI or machine learning models.

Your control

• Export project data at any time from inside the product (CSV, JSON)
• Delete records, projects, or your entire account
• Revoke shared links, project tokens, and collaborator access
• Disconnect any connected AI tool at any time — its stored credentials are deleted immediately
• Contact us for account questions or data removal requests

Cookies and tracking

Picrowd uses an authentication cookie to keep you signed in. We do not use third-party tracking cookies, advertising pixels, or analytics scripts that follow you across the web.