MyPick and its parent company, PickOS Inc.

MyPick is a service owned and operated by PickOS Inc., its parent company. MyPick is the service name; PickOS Inc. is the legal entity operating the service.

In this document, “we,” “us,” and “our” refer to PickOS Inc. References to MyPick’s rights, obligations, or actions mean PickOS Inc. acting through the MyPick service. References to the MyPick website, apps, marketplace, or platform describe the service. For agreements with MyPick, your contracting party is PickOS Inc.; the responsibilities of sellers and other third parties remain as described in the applicable agreement.

Corporate website: pickos.com
Corporate office: 131 Continental Drive, Suite 305, Newark, DE 19713, USA

1. Purpose and Scope

This policy explains how long MyPick keeps personal information, how deletion works when you ask for it, and how to exercise the privacy rights available to US state residents. It supplements our Privacy Policy.

2. Retention Principles

Purpose limitation. We keep personal information only as long as needed for the purposes it was collected: operating accounts, processing orders, providing support, preventing fraud, and meeting legal obligations.
Legal requirements. Where tax, accounting, or consumer-protection law requires records to be kept, we retain them for the required period.
Minimization. When a shorter period is sufficient, we use it, and we de-identify or aggregate data where the identified form is no longer necessary.

3. Retention by Data Category

Account and profile data: for the life of your account, plus 30 days to complete closure, after which it is deleted or de-identified.
Transaction and order records: up to 7 years, consistent with tax and accounting requirements.
Payment data: card and bank details are handled by payment processors that maintain industry security certifications. MyPick does not store full payment credentials; we retain only processor tokens and limited indicators, such as card brand and last four digits, for receipts and refunds.
Support communications: up to 3 years after a matter is closed, for follow-ups and disputes.
Device and usage analytics: up to 26 months, after which the data is aggregated or deleted.
Marketing preferences and consents: kept until you withdraw them, plus a short period to honor suppression requests.
Legal holds: where data is subject to a legal hold or an open dispute, investigation, or recall, retention applies until the hold is released, overriding the periods above.

4. Deletion Triggers and What Deletion Means

Deletion is triggered when a retention period expires, when you close your account, or when you submit a deletion request we are required to honor. Deleted data is removed from active systems and ordinary business use. Copies that exist in encrypted backups are purged on our normal backup cycle, which can take up to 90 days. Some data cannot be deleted because law requires it — for example, transaction records — or because we need it to complete a refund, resolve a dispute, or detect fraud; that data is retained only for those purposes.

5. US State Privacy Rights Recap

Depending on your state of residence, you may have the right to:

Know and access the personal information we hold about you.
Delete personal information, subject to the exceptions described above.
Correct inaccurate personal information.
Opt out of targeted advertising, the sale or sharing of personal information, and certain profiling.
Non-discrimination in the price and quality of the service for exercising these rights.

6. How to Submit a Request

Submit privacy requests through the Privacy Requests page on the platform, or through the Contact Us page if you need help. Tell us which right you are exercising and provide the information needed to identify your account. You can also use in-app privacy settings to correct profile details and adjust communication preferences directly.

7. Verification and Authorized Agents

Before acting on a request, we verify your identity by matching information you provide against our records and, for sensitive requests, through additional confirmation such as sign-in verification. We will not require you to create a new account or provide more information than necessary. If you use an authorized agent, we may require written permission from you and confirmation of the agent's identity before we act.

8. Response Timeline

We aim to respond to requests within 45 days of receipt. Where reasonably necessary, we may extend the deadline by a further 45 days and will tell you within the initial period and explain why. If we deny a request, we will explain why and how you can appeal, including any appeal rights available under your state's law.

9. Non-Discrimination

We do not discriminate against you for exercising any privacy right. Exercising your rights will not result in denial of the service, different pricing, or a lower quality of experience, except where a reduced service is the unavoidable result of deletion itself — for example, where data needed to complete a purchase is gone.

10. Children's Data

MyPick is not directed to children, and we do not knowingly collect personal information from children under 13. Minors may have additional state-law rights regarding information used for targeted advertising or sold or shared with third parties. If you believe a child has provided us personal information, contact us so we can delete it.

11. Changes and Contact

We update this policy as our data practices and legal obligations evolve; revisions are published with version history as described in our Policy Updates & Change Notice. For questions the Privacy Requests process does not cover, use the Contact Us page.

Your basket