Privacy. Your data, followed from end to end.

What we store

• Your account. Your name, email address and profile picture, as Google gives them to us when you sign in with Google, or as you type them when you sign up with an email address. Anything you add under Your details, such as your job title, country, time zone or phone number. For each signed-in session, your internet address and which browser you use.
• The documents you create, and every version of them, so you can go back. These are yours; we do not read them except in screen recordings, described below, or when you ask for support and tell us which one.
• What Piko remembers about you, described in the next section.
• Files you upload to My files, or attach to a tool before the document is saved, for thirty days. After that nobody can open them, and they are removed from storage.
• Files kept until you remove them: your CV and any other file you give to Piko's memory, your profile photo, a screenshot you send with feedback, and a file attached to a saved document, for as long as it stays attached.
• What your AI agents do: the tasks you give them, what they write back, your conversations with them, and the emails they send for you, until you delete them.
• Accounts you connect, such as Jira, Confluence or Slack. The access token is encrypted with a key held outside the database, so a copy of the database alone cannot use it.
• A record of each time a tool runs: which tool, which model, how long it took and what it cost us. That record holds none of what you typed and none of what came back; what a tool writes is kept as your document instead.
• An activity log of security-relevant events, such as signing in or connecting an account. It deliberately contains no email addresses, because it outlives the account it describes.

What Piko remembers about you

Piko keeps a short list of facts about you, so the tools write for you rather than for anyone. The facts are about you only: your career, your skills and domains, how you work, how you write, and your goals.

• Where the facts come from. What you give it: your CV, a LinkedIn link (PikoPM reads your public profile page), what you write under About me, other files you add, and facts you type in yourself. And, while learning is on, how you use PikoPM: what you type into a tool, what you ask for when you revise a document, and edits you save to a document Piko wrote. Never from other people's work or from a file someone shared with you.
• How they are found. An AI model, from the providers listed below, reads what you gave and picks out the facts. Birthdays, addresses, phone numbers, and anything about health, religion, politics or family are dropped, even when your CV has them. The text of your CV is not kept, only the facts and the file.
• Where they are kept. The facts, your About me text and your LinkedIn link are in our database. Your CV and other files are in our file storage, kept until you remove them. Nobody else using PikoPM can see your memory.
• How they are used. Every tool and AI agent reads them before it writes for you, so they are sent to the model provider along with that request. Many tools show which facts they used.
• Seeing them. In Account, under Piko's memory of you. Every fact says where it came from, and what Piko learned on its own is marked new until you keep it or forget it.
• Forgetting. Press Forget beside a fact to delete it, or Forget everything to delete every fact at once; your CV and other sources stay until you remove them. Removing a source deletes its file, and you choose whether its facts go too. Forgotten facts are deleted at once, not hidden.
• Stopping it learning. Turn off Learn from how I use Piko in Account, under Privacy. Piko then learns nothing new from your work. The facts you already have are still used until you forget them, and a CV, link or file you add yourself is still read.

What leaves PikoPM, and where it goes

When you run a tool, what you wrote and the facts Piko remembers about you are sent to the model provider that answers it, so that it can answer. We use providers that offer terms under which your content is not used to train their models and is not retained beyond the request.

When you connect an account such as Jira or Slack, PikoPM reads from it as you, using the permission you granted. It writes to it only when you ask: when you press the button for it, approve a change, or set up an AI agent or a schedule to post for you. A change to Jira waits for your approval first.

How we learn how PikoPM is used

We use PostHog, hosted in the EU, to see how PikoPM is used, so we can find where it gets in people's way.

• What happened, not what you wrote. That you signed up, ran a tool, exported or shared a document, connected an app or chose a plan, and which pages you opened, including this one. You are identified by an internal number, never by your name or email address. Your internet address is passed on with each page view. Nothing is stored on your device for this.
• Screen recordings, while you are signed in. They show your clicks and scrolling, what you type and the documents Piko writes for you, and what each tool was asked and what it answered. We use them to find where PikoPM gets in your way and to check how good Piko's answers are. Passwords are never recorded, and neither are the Billing pages, where you choose a plan, pay or cancel. Recording starts only once you are signed in, so nothing you type to sign in is recorded, and what your browser exchanges with PikoPM about your account and billing is left out of every recording. Only the PikoPM team can watch recordings, and they are deleted after 30 days. Pages you open without signing in are never recorded; a shared link is recorded only when the person opening it is signed in to PikoPM.
• Nothing is recorded unless you say yes. The first time you sign in, PikoPM asks whether it may record your screen, and until you answer, nothing is recorded. Change your answer any time with Allow screen recordings in Account, under Privacy; it holds on every device.

If you answered a survey

Companies use PikoPM to make surveys and send them to their customers. If you answered one, this is what happens to your answers.

• They go to the company that sent you the survey, kept in its PikoPM account. Only that company sees them. We do not use them for anything else, and they are deleted when the company deletes the survey.
• They are anonymous unless the survey asks for your email address and you choose to give it. We do not keep your name or your internet address. To stop one place sending a flood of answers, we count answers an hour under a code made from that address and the survey, rather than the address itself, and delete the count once the hour is over.
• One cookie is kept in your browser, saying you have answered, so the same browser cannot answer the same survey twice. While the page is open it also keeps a random number for this visit, which is gone when you close the tab. Nothing else is stored on your device, and the survey page does not track you anywhere else.
• How far you got is sent as you answer: how many questions you have answered and which one you are on, under that random number, so the company can see where people stop. What you chose is sent only when you press Send. If you leave without sending, your answers are never sent.
• Written answers may be read by an AI model if the company asks PikoPM to find the themes in them, through the model providers listed above. Email addresses and phone numbers are taken out first.
• To have your answers removed, ask the company that sent you the survey, or write to us at the address below with the survey's link.

Children

PikoPM is for people aged 18 and over, and is not made for children. Creating an account asks you to confirm your age. We do not knowingly collect personal data from anyone under 18, and the companies that use PikoPM may not send their surveys to children. If you believe a child has given us their details, in an account or in a survey answer, write to us at the address below and we will delete them.

What we never do

We do not sell your data, share it with advertisers, add you to a marketing list without asking, or use your documents or your memory to train an AI model. The PikoPM team sees your documents only in screen recordings, as described above, if you allowed them, or when you ask for help with one.

Where it is kept

In the European Union. The database and files are in Frankfurt and the application runs in Amsterdam. Model providers may process a request outside the EU while answering it.

Your choices

• Disconnect an account at any time from the Connections page. The stored token is deleted immediately and stops working.
• See, correct or forget what Piko remembers, and switch off its learning, in Account, as described above.
• Allow or stop screen recordings in Account, under Privacy.
• Delete a document whenever you like. Its share links stop working at the same moment.
• Delete your account, from your account settings. This removes your profile, your documents and their versions, your files, your memory, your connected accounts, your surveys and their answers, and your AI agents. A record that a tool ran and the activity log are kept for our own accounting, with nothing that names you. Every share link you made stops working.
• Ask us for a copy of what we hold about you, or ask us to correct it, by emailing the address below.

Contact

PikoPM is run by Hovik Tamazyan, who is responsible for your data (the data controller). Write to hello@pikopm.com with anything about this page, including a request to see or delete your data.