Privacy Policy
Last updated: February 18, 2026
Picflo ("we", "us", or "our") operates the Picflo platform at picflo.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
Account Information
When you sign in with Google OAuth, we receive your name, email address, and profile photo from your Google account. We do not receive or store your Google password.
Project Data
Information you provide while using Picflo, including project details, shotlists, vision boards, storyboards, meeting transcripts, venue information, and client portal content.
Uploaded Media
Photos and images you upload to inspiration boards, vision boards, and other project features. These are stored in Google Cloud Storage.
Usage Data
We automatically collect information about how you interact with the platform, including pages visited, features used, and general device and browser information.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Picflo platform
- Power AI features such as our photography assistant (Flo), image generation, shot estimates, and inspiration search
- Enable collaboration within your organization and team
- Generate client-facing project portals when you share them
- Send service-related communications (e.g. account updates)
- Detect and prevent security issues and abuse
3. AI Features & Third-Party Services
Picflo uses Google's Gemini and Vertex AI services to power features like our AI assistant, image generation, and vector similarity search. When you use these features, relevant project data (such as shotlist items or uploaded images) may be sent to Google Cloud for processing. We do not use your data to train third-party AI models.
4. Data Storage & Security
Your data is stored in Google Cloud services including Firestore and Cloud Storage. We use industry-standard security measures including encryption in transit (TLS) and at rest. Access to your data is restricted by Firebase Authentication and organization-level role controls.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Your team: Organization members with appropriate roles (owner, admin, photographer) can access shared projects.
- Your clients: When you create a client portal link, the shared project content is accessible via that token-based link.
- Service providers: Google Cloud (hosting, storage, AI), Stripe (payments, when applicable), and other infrastructure providers necessary to operate the service.
- Legal obligations: If required by law, regulation, or legal process.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your project data
- Withdraw consent for optional data processing
To exercise any of these rights, contact us at hello@picflo.ai.
7. Cookies & Analytics
We use essential cookies for authentication and session management. We may use analytics tools to understand how the platform is used. We do not use advertising cookies or trackers.
8. Data Retention
We retain your account and project data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
9. Children's Privacy
Picflo is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: