Privacy Policy

Pickabuuu (“we”, “us”) is a wishlist platform that lets people share gift wishes with friends and family for life’s celebrations. This policy explains what personal information we collect, how we use it, and the choices you have. We comply with applicable Indian law including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).

• Account data: name, email, phone (optional), city, profile photo.
• Wishlist content: event details, wish items, photos, messages, links you add.
• Gifter data: name, email, phone, optional shipping city, gift commitments and messages.
• Engagement data: page views, RSVP status, cheers (after approval), commitments.
• Technical data: IP-derived city (hashed), device identifier (for passcode rate-limiting), browser type.

• To create, host and display your wishlist on the link you choose.
• To let gifters commit to items, send notes and request your shipping address (only if you allow it).
• To send transactional emails (verification, password reset, gift reminders, thank-you nudges).
• To moderate user-generated content (messages, item descriptions) for harmful, illegal or offensive material.
• To improve product features and surface relevant gift recommendations.

We never sell personal data. We share data only with: (a) infrastructure providers strictly to operate the service (database, email, payments); (b) law enforcement where required by valid Indian law; (c) third parties only with your explicit consent. Wishlist owners control who sees their wishlist via public, unlisted or private (passcode) modes.

Data is hosted on managed infrastructure with encryption in transit and at rest. Access is restricted via role-based permissions and database-level row security. Passcodes for private wishlists are stored as one-way bcrypt hashes; we cannot read them back.

You may at any time: access your data, correct inaccuracies, delete your account, or withdraw consent. Email support@pickabuuu.app. We action verified requests within 30 days.

Pickabuuu is not intended for users under 18. Adults may create wishlists on behalf of minors (e.g. baby showers, first birthdays); the adult is the data controller for that content.

We use first-party cookies and local storage strictly to keep you signed in, remember preferences, and rate-limit passcode attempts. We do not run third-party advertising trackers.

In line with the Information Technology (Intermediary Guidelines) Rules, 2021, our designated Grievance Officer is reachable at support@pickabuuu.app. Complaints will be acknowledged within 24 hours and resolved within 15 days.

We will update this page when our practices change and notify account holders by email for material updates.